1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/xul/crashtests/432068-1.xul Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,31 @@ 1.4 +<?xml version="1.0"?> 1.5 + 1.6 +<?xml-stylesheet href="chrome://global/skin/" type="text/css"?> 1.7 + 1.8 +<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" onload="boom();"> 1.9 + 1.10 +<hbox style="display: none;"> 1.11 + <bindings xmlns="http://www.mozilla.org/xbl"> 1.12 + <binding id="x"> 1.13 + <content><listitem xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"/></content> 1.14 + </binding> 1.15 + </bindings> 1.16 +</hbox> 1.17 + 1.18 +<script type="text/javascript"> 1.19 + 1.20 +function boom() 1.21 +{ 1.22 + document.getElementById("b").style.MozBinding = "url('#x')"; 1.23 + 1.24 + // Flush layout. 1.25 + document.documentElement.boxObject.height; 1.26 + 1.27 + document.getElementById("listbox").removeChild(document.getElementById("c")); 1.28 +} 1.29 + 1.30 +</script> 1.31 + 1.32 +<listbox id="listbox"><listitem/><listitem id="b"/><listitem id="c"/></listbox> 1.33 + 1.34 +</window>