layout/xul/crashtests/326834-1-inner.xul

Wed, 31 Dec 2014 06:55:50 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:55:50 +0100
changeset 2
7e26c7da4463
permissions
-rw-r--r--

Added tag UPSTREAM_283F7C6 for changeset ca08bd8f51b2

michael@0 1 <window title="Testcase bug 326834 - Crash with evil xul testcase, using listbox/listitem and display: table-cell"
michael@0 2 xmlns:html="http://www.w3.org/1999/xhtml"
michael@0 3 xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
michael@0 4 <listbox>
michael@0 5 <listitem label="This page should not crash Mozilla"/>
michael@0 6 </listbox>
michael@0 7 <html:script>
michael@0 8 function doe() {
michael@0 9 var el=document.getElementsByTagName('*');
michael@0 10 document.getElementsByTagName('listbox')[0].style.display = 'table-cell';
michael@0 11 document.getElementsByTagName('listitem')[0].style.display = 'table-cell';
michael@0 12 window.getComputedStyle(document.getElementsByTagName('listitem')[0], '').getPropertyValue("height");
michael@0 13 document.getElementsByTagName('listitem')[0].style.display = '';
michael@0 14 }
michael@0 15 setTimeout(doe,500);
michael@0 16 </html:script>
michael@0 17 </window>

mercurial