1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/374420.xhtml Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,34 @@ 1.4 +<html xmlns="http://www.w3.org/1999/xhtml" xmlns:mathml="http://www.w3.org/1998/Math/MathML"> 1.5 +<title>Testcase bug - Crash [@ nsHTMLReflowState::GetNearestContainingBlock] with testcase using generated content, xbl and mathml</title> 1.6 +<bindings xmlns="http://www.mozilla.org/xbl"><binding id="a"> 1.7 +<content><children> 1.8 +<div xmlns="http://www.w3.org/1999/xhtml" style="position: absolute;"> 1.9 +<div style="position: absolute;"/> 1.10 +</div> 1.11 +</children></content> 1.12 +</binding></bindings> 1.13 +<style> 1.14 + mtable::after { content:"anonymous text"; } 1.15 + mtable::before { content:"before text"; } 1.16 +</style> 1.17 + 1.18 +<thead style="overflow: scroll;"> 1.19 + <mathml:mrow> 1.20 + <mathml:mtable> 1.21 + <tfoot style="-moz-binding: url(#a);" id="a_1"> 1.22 + <td style="-moz-binding: url(#a);"/> 1.23 + </tfoot> 1.24 + </mathml:mtable> 1.25 + <td id="a_2"/> 1.26 + </mathml:mrow> 1.27 +</thead> 1.28 + 1.29 +<script xmlns="http://www.w3.org/1999/xhtml"> 1.30 + function doe() { 1.31 + document.getElementById('a_1').style.borderCollapse = ""; 1.32 + document.documentElement.offsetHeight; 1.33 + document.getElementById('a_2').parentNode.removeChild(document.getElementById('a_2')); 1.34 + } 1.35 + setTimeout(doe, 400); 1.36 +</script> 1.37 +</html> 1.38 \ No newline at end of file