wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

bug 822842 - crash when nsROCSSPrimitiveValue::Reset() is called multiple times r=bz

Browse Source
This commit is contained in:
Trevor Saunders 2012-12-18 21:29:23 -05:00
parent 9b7394adca
commit dc0dda5386
3 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
layout/style/crashtests/822842.html Normal file
View File

@ -0,0 +1,13 @@
<html>
<head></head>
<body></body>
<script type="text/javascript">
window.x = window.getComputedStyle(document.documentElement, null).getPropertyCSSValue("transition-timing-function");
window.x = window.getComputedStyle(document.documentElement, null).getPropertyCSSValue("color");
x.z = x.getRGBColorValue().blue;
x.getRGBColor().blue.d = x;
x= null;
SpecialPowers.forceGC();
SpecialPowers.forceCC();
</script>
</html>

1
layout/style/crashtests/crashtests.list
View File

@ -82,3 +82,4 @@ skip-if(browserIsRemote) load 786108-2.html # Bug 795534
load 788836.html
load 806310-1.html
load 812824.html
load 822842.html

2
layout/style/nsROCSSPrimitiveValue.cpp
View File

@ -656,4 +656,6 @@ nsROCSSPrimitiveValue::Reset()
NS_RELEASE(mValue.mColor);
break;
}
mType = CSS_UNKNOWN;
}