layout/generic/crashtests/374420.xhtml

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/layout/generic/crashtests/374420.xhtml	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,34 @@
     1.4 +<html xmlns="http://www.w3.org/1999/xhtml" xmlns:mathml="http://www.w3.org/1998/Math/MathML">
     1.5 +<title>Testcase bug - Crash [@ nsHTMLReflowState::GetNearestContainingBlock] with testcase using generated content, xbl and mathml</title>
     1.6 +<bindings xmlns="http://www.mozilla.org/xbl"><binding id="a">
     1.7 +<content><children>
     1.8 +<div xmlns="http://www.w3.org/1999/xhtml" style="position: absolute;">
     1.9 +<div style="position: absolute;"/>
    1.10 +</div>
    1.11 +</children></content>
    1.12 +</binding></bindings>
    1.13 +<style>
    1.14 +  mtable::after { content:"anonymous text"; }
    1.15 +  mtable::before { content:"before text"; }
    1.16 +</style>
    1.17 +
    1.18 +<thead style="overflow: scroll;">
    1.19 +  <mathml:mrow>
    1.20 +    <mathml:mtable>
    1.21 +      <tfoot style="-moz-binding: url(#a);" id="a_1">
    1.22 +        <td style="-moz-binding: url(#a);"/>
    1.23 +      </tfoot>
    1.24 +    </mathml:mtable>
    1.25 +    <td id="a_2"/>
    1.26 +  </mathml:mrow>
    1.27 +</thead>
    1.28 +
    1.29 +<script xmlns="http://www.w3.org/1999/xhtml">
    1.30 +  function doe() {
    1.31 +    document.getElementById('a_1').style.borderCollapse = "";
    1.32 +    document.documentElement.offsetHeight;
    1.33 +    document.getElementById('a_2').parentNode.removeChild(document.getElementById('a_2'));  
    1.34 +  }
    1.35 +  setTimeout(doe, 400);
    1.36 +</script>
    1.37 +</html>
    1.38 \ No newline at end of file

mercurial