Bug 374420 - crashtest.

This commit is contained in:
Martijn Wargers 2013-12-23 16:51:58 +00:00
parent f7047815bd
commit 8bb94d33ec
2 changed files with 35 additions and 0 deletions

View File

@ -0,0 +1,34 @@
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:mathml="http://www.w3.org/1998/Math/MathML">
<title>Testcase bug - Crash [@ nsHTMLReflowState::GetNearestContainingBlock] with testcase using generated content, xbl and mathml</title>
<bindings xmlns="http://www.mozilla.org/xbl"><binding id="a">
<content><children>
<div xmlns="http://www.w3.org/1999/xhtml" style="position: absolute;">
<div style="position: absolute;"/>
</div>
</children></content>
</binding></bindings>
<style>
mtable::after { content:"anonymous text"; }
mtable::before { content:"before text"; }
</style>
<thead style="overflow: scroll;">
<mathml:mrow>
<mathml:mtable>
<tfoot style="-moz-binding: url(#a);" id="a_1">
<td style="-moz-binding: url(#a);"/>
</tfoot>
</mathml:mtable>
<td id="a_2"/>
</mathml:mrow>
</thead>
<script xmlns="http://www.w3.org/1999/xhtml">
function doe() {
document.getElementById('a_1').style.borderCollapse = "";
document.documentElement.offsetHeight;
document.getElementById('a_2').parentNode.removeChild(document.getElementById('a_2'));
}
setTimeout(doe, 400);
</script>
</html>

View File

@ -99,6 +99,7 @@ load 372376-1.xhtml
load 373859-1.html
load 373868-1.xhtml
load 374090.html
load 374420.xhtml
load 375462-1.html
load 375831.html
load 376419.html