1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/gfx/tests/crashtests/490777-1.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,9 @@ 1.4 +<!-- This crashed on Mac OS X with the modified ATSUI font backend implemented in 1.5 + bug 481948. Crash occurs due to an unpaired low surrogate in text with the 1.6 + right-to-left direction override; this cannot occur in direct HTML content 1.7 + because the unpaired surrogate will be replaced with U+FFFD, but it can be 1.8 + generated from Javascript. --> 1.9 +<html> 1.10 +<body onload="document.body.appendChild(document.createTextNode('\u202E\u4839\uDC1D'));"> 1.11 +</body> 1.12 +</html>