Bug 491547. Add crashtests.

--HG--
extra : rebase_source : 7b30a1fa465ebdef49cb39f6f99e8d83350cc82b

layout/base/crashtests/491547-1.xul

@@ -0,0 +1,20 @@
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<box id="a" style="display: list-item;">
+&amp;m&amp;m
+<box id="b"/>
+</box>
+
+<style xmlns="http://www.w3.org/1999/xhtml">
+#a::first-letter {float: right; }
+</style>
+
+<script xmlns="http://www.w3.org/1999/xhtml">
+function doe() {
+document.getElementById('a').style.direction = 'rtl';
+document.getElementById('b').style.direction = 'ltr';
+}
+setTimeout(doe, 100);
+</script>
+
+</window>

layout/base/crashtests/491547-2.xul

@@ -0,0 +1,31 @@
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<box id="a" style="display: list-item;">
+&amp;c&amp;m&amp;q
+<box id="b"/>
+</box>
+
+<style xmlns="http://www.w3.org/1999/xhtml">
+#a::first-letter {float: right; color: red;}
+</style>
+
+<script xmlns="http://www.w3.org/1999/xhtml"><![CDATA[
+function run() {
+  for (var i = 0; i < 20; i++) {
+    document.documentElement.offsetWidth;
+    doe();
+    document.documentElement.offsetWidth;
+    undoe();
+  }
+}
+function doe() {
+  document.getElementById('a').style.direction = 'rtl';
+  document.getElementById('b').style.direction = 'ltr';
+}
+function undoe() {
+  document.getElementById('a').style.direction = 'ltr';
+  document.getElementById('b').style.direction = 'rtl';
+}
+setTimeout(run, 100);
+]]></script>
+</window>

layout/base/crashtests/crashtests.list

@@ -257,6 +257,8 @@ load 489691.html
 load 490376-1.xhtml
 load 490559-1.html
 load 490747.html
+load 491547-1.xul
+load 491547-2.xul
 load 492014.xhtml
 load 492112-1.xhtml
 load 492163-1.xhtml