layout/generic/crashtests/350370.html@6474c204b198 (annotated)
layout/generic/crashtests/350370.html
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
| michael@0 | 1 | <html><head> |
| michael@0 | 2 | <title>Testcase bug 350370 - Crash [@ nsStyleContext::FindChildWithRules] with ::first-line, appending rows and table-cells, etc</title> |
| michael@0 | 3 | <style> |
| michael@0 | 4 | #b td::first-line { font-size:110%;} |
| michael@0 | 5 | nobr::first-line { font-size:110%;} |
| michael@0 | 6 | |
| michael@0 | 7 | #b td::after { content:"anonymous text"; } |
| michael@0 | 8 | nobr::after{ content:"anonymous text"; } |
| michael@0 | 9 | |
| michael@0 | 10 | #b::before { content:"before text";} |
| michael@0 | 11 | #b td::before { content:"before text";} |
| michael@0 | 12 | </style> |
| michael@0 | 13 | </head> |
| michael@0 | 14 | <body> |
| michael@0 | 15 | <table style="display: table-row;"></table><nobr style="display: list-item; -moz-column-count: 2;"> |
| michael@0 | 16 | <table id="b" style="display: inline;"></table> |
| michael@0 | 17 | </nobr> |
| michael@0 | 18 | <br> |
| michael@0 | 19 | This page should not crash Mozilla |
| michael@0 | 20 | <script> |
| michael@0 | 21 | function doe(){ |
| michael@0 | 22 | var td = document.createElement('td');; |
| michael@0 | 23 | td.setAttribute('height', '50%'); |
| michael@0 | 24 | var tr = document.createElement('tr');; |
| michael@0 | 25 | tr.setAttribute('height', '50%'); |
| michael@0 | 26 | tr.appendChild(td); |
| michael@0 | 27 | document.getElementsByTagName('table')[1].appendChild(tr); |
| michael@0 | 28 | document.body.offsetHeight; |
| michael@0 | 29 | |
| michael@0 | 30 | var td = document.createElement('td');; |
| michael@0 | 31 | td.setAttribute('height', '50%'); |
| michael@0 | 32 | document.getElementsByTagName('tr')[0].appendChild(td); |
| michael@0 | 33 | document.body.offsetHeight; |
| michael@0 | 34 | |
| michael@0 | 35 | var td = document.createElement('td');; |
| michael@0 | 36 | td.setAttribute('height', '50%'); |
| michael@0 | 37 | document.getElementsByTagName('tr')[0].appendChild(td); |
| michael@0 | 38 | } |
| michael@0 | 39 | setTimeout(doe, 60); |
| michael@0 | 40 | </script> |
| michael@0 | 41 | </body> |
| michael@0 | 42 | </html> |
