1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/dom/xbl/crashtests/830614-1.xul Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,24 @@ 1.4 +<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" 1.5 + onload="document.getElementById('trigger');"> 1.6 + <box style="display: none"> 1.7 + <bindings xmlns="http://www.mozilla.org/xbl"> 1.8 + <binding id="crash"> 1.9 + <implementation> 1.10 + <constructor> 1.11 + // Fetch it 1.12 + var obj = this.getElementsByTagName("box")[0]; 1.13 + // And make it preserve its wrapper. Note that this will happen 1.14 + // while we're wrapping our box as the parent for id="trigger", 1.15 + // so then we'll unwind and things will be bad. 1.16 + if (obj) obj.expando = 5; 1.17 + </constructor> 1.18 + </implementation> 1.19 + </binding> 1.20 + </bindings> 1.21 + <box style="-moz-binding:url(#crash);"> 1.22 + <box id="trigger"/> 1.23 + </box> 1.24 + </box> 1.25 + <!-- Make sure we load our XBL before we try to run our test --> 1.26 + <box style="-moz-binding:url(#crash);"/> 1.27 +</window>