1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/xul/crashtests/326834-1-inner.xul Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,17 @@ 1.4 +<window title="Testcase bug 326834 - Crash with evil xul testcase, using listbox/listitem and display: table-cell" 1.5 + xmlns:html="http://www.w3.org/1999/xhtml" 1.6 + xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"> 1.7 +<listbox> 1.8 + <listitem label="This page should not crash Mozilla"/> 1.9 +</listbox> 1.10 +<html:script> 1.11 +function doe() { 1.12 +var el=document.getElementsByTagName('*'); 1.13 +document.getElementsByTagName('listbox')[0].style.display = 'table-cell'; 1.14 +document.getElementsByTagName('listitem')[0].style.display = 'table-cell'; 1.15 +window.getComputedStyle(document.getElementsByTagName('listitem')[0], '').getPropertyValue("height"); 1.16 +document.getElementsByTagName('listitem')[0].style.display = ''; 1.17 +} 1.18 +setTimeout(doe,500); 1.19 +</html:script> 1.20 +</window>