layout/generic/crashtests/404215-2.html

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0 1 <html>
michael@0 2 <head><style>
michael@0 3 /* Sets of heights that trigger crash:
michael@0 4 100px/50px/51+px
michael@0 5 100px/30px/74+px
michael@0 6 Get only an assert unless you set ".d { position: absolute; }".
michael@0 7
michael@0 8 Trigger hang (separate issue, absolute not needed):
michael@0 9 10px/10px/9999px
michael@0 10 10px/10px/999999px --> "bad height" notreached
michael@0 11 */
michael@0 12 #colset { width: 200px;
michael@0 13 -moz-column-count: 3; }
michael@0 14 #a { height: 100px; }
michael@0 15 #b { height: 50px; }
michael@0 16 #c { height: 51px; }
michael@0 17 #d { position: absolute; }
michael@0 18 </style>
michael@0 19 <script>
michael@0 20 function boom() {
michael@0 21 document.getElementById('a').style.height = 'auto';
michael@0 22 }
michael@0 23 </script>
michael@0 24 </head>
michael@0 25 <!-- Removing whitespace in body for simpler frame trees -->
michael@0 26 <body onload="setTimeout('boom()', 1000)"
michael@0 27 ><div id="colset"
michael@0 28 ><div
michael@0 29 ><div id="a"></div
michael@0 30 ><div id="b"
michael@0 31 ><div id="c"></div
michael@0 32 ><div id="d"></div
michael@0 33 ></div
michael@0 34 ></div
michael@0 35 ></div
michael@0 36 ></body>
michael@0 37 </html>

mercurial