layout/generic/crashtests/374420.xhtml

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:0263e8b4e049
1 <html xmlns="http://www.w3.org/1999/xhtml" xmlns:mathml="http://www.w3.org/1998/Math/MathML">
2 <title>Testcase bug - Crash [@ nsHTMLReflowState::GetNearestContainingBlock] with testcase using generated content, xbl and mathml</title>
3 <bindings xmlns="http://www.mozilla.org/xbl"><binding id="a">
4 <content><children>
5 <div xmlns="http://www.w3.org/1999/xhtml" style="position: absolute;">
6 <div style="position: absolute;"/>
7 </div>
8 </children></content>
9 </binding></bindings>
10 <style>
11 mtable::after { content:"anonymous text"; }
12 mtable::before { content:"before text"; }
13 </style>
14
15 <thead style="overflow: scroll;">
16 <mathml:mrow>
17 <mathml:mtable>
18 <tfoot style="-moz-binding: url(#a);" id="a_1">
19 <td style="-moz-binding: url(#a);"/>
20 </tfoot>
21 </mathml:mtable>
22 <td id="a_2"/>
23 </mathml:mrow>
24 </thead>
25
26 <script xmlns="http://www.w3.org/1999/xhtml">
27 function doe() {
28 document.getElementById('a_1').style.borderCollapse = "";
29 document.documentElement.offsetHeight;
30 document.getElementById('a_2').parentNode.removeChild(document.getElementById('a_2'));
31 }
32 setTimeout(doe, 400);
33 </script>
34 </html>

mercurial