1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/layout/forms/crashtests/375299.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,17 @@
1.4 +<html><head>
1.5 +<title>Testcase bug - Crash [@ nsFileControlFrame::CreateAnonymousContent] when removing stylesheet with binding and removing file input</title>
1.6 +<style>
1.7 +body {-moz-binding:url("375299-binding.xml#a"); }
1.8 +</style>
1.9 +</head><body onload="doe()">
1.10 +<input type="file">
1.11 +
1.12 +<script>
1.13 +function doe() {
1.14 +var x=document.getElementsByTagName('input')[0];
1.15 +x.parentNode.removeChild(x);
1.16 +var y=document.getElementsByTagName('style')[0];
1.17 +y.parentNode.removeChild(y);
1.18 +}
1.19 +</script>
1.20 +</body></html>
