bug 347355 - crash test by Jesse Ruderman.

This commit is contained in:
Bob Clary 2009-04-24 10:08:14 -07:00
parent 4fe75a8b3a
commit 8fa2e46b7a
4 changed files with 38 additions and 0 deletions

View File

@ -0,0 +1,28 @@
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script>
function foo()
{
var mrow = document.getElementById("mrow")
mrow.parentNode.removeChild(mrow);
}
</script>
</head>
<body onload="setTimeout(foo, 100)">
<div>
<math xmlns="http://www.w3.org/1998/Math/MathML" display="block">
<mrow id="mrow">
<mtd><img xmlns="http://www.w3.org/1999/xhtml" src="347355-1.gif" /></mtd>
<mtable> <mtr> <mtd><mi>t</mi></mtd> </mtr> </mtable>
</mrow>
</math>
</div>
</body>
</html>

Binary file not shown.

After

Width:  |  Height:  |  Size: 980 B

View File

@ -0,0 +1,9 @@
<html class="reftest-wait">
<head>
<script>
setTimeout('document.documentElement.className = ""', 1000);
</script>
<body>
<iframe src="347355-1-inner.xhtml"></iframe>
</body>
</html>

View File

@ -9,6 +9,7 @@ load 323738-1.xml
load 323741-1.xml
load 323742-1.xml
load 336074-1.xhtml
load 347355-1.html
load 347495-1.xhtml
load 347507-1.xhtml
load 348492-1.xhtml