layout/xul/crashtests/326834-1-inner.xul

Thu, 15 Jan 2015 21:03:48 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 21:03:48 +0100
branch
TOR_BUG_9701
changeset 11
deefc01c0e14
permissions
-rw-r--r--

Integrate friendly tips from Tor colleagues to make (or not) 4.5 alpha 3;
This includes removal of overloaded (but unused) methods, and addition of
a overlooked call to DataStruct::SetData(nsISupports, uint32_t, bool.)

michael@0 1 <window title="Testcase bug 326834 - Crash with evil xul testcase, using listbox/listitem and display: table-cell"
michael@0 2 xmlns:html="http://www.w3.org/1999/xhtml"
michael@0 3 xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
michael@0 4 <listbox>
michael@0 5 <listitem label="This page should not crash Mozilla"/>
michael@0 6 </listbox>
michael@0 7 <html:script>
michael@0 8 function doe() {
michael@0 9 var el=document.getElementsByTagName('*');
michael@0 10 document.getElementsByTagName('listbox')[0].style.display = 'table-cell';
michael@0 11 document.getElementsByTagName('listitem')[0].style.display = 'table-cell';
michael@0 12 window.getComputedStyle(document.getElementsByTagName('listitem')[0], '').getPropertyValue("height");
michael@0 13 document.getElementsByTagName('listitem')[0].style.display = '';
michael@0 14 }
michael@0 15 setTimeout(doe,500);
michael@0 16 </html:script>
michael@0 17 </window>

mercurial