Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 <html>
2 <head><style>
3 /* Sets of heights that trigger crash:
4 100px/50px/51+px
5 100px/30px/74+px
6 Get only an assert unless you set ".d { position: absolute; }".
8 Trigger hang (separate issue, absolute not needed):
9 10px/10px/9999px
10 10px/10px/999999px --> "bad height" notreached
11 */
12 #colset { width: 200px;
13 -moz-column-count: 3; }
14 #a { height: 100px; }
15 #b { height: 50px; }
16 #c { height: 51px; }
17 #d { position: absolute; }
18 </style>
19 <script>
20 function boom() {
21 document.getElementById('a').style.height = 'auto';
22 }
23 </script>
24 </head>
25 <!-- Removing whitespace in body for simpler frame trees -->
26 <body onload="setTimeout('boom()', 1000)"
27 ><div id="colset"
28 ><div
29 ><div id="a"></div
30 ><div id="b"
31 ><div id="c"></div
32 ><div id="d"></div
33 ></div
34 ></div
35 ></div
36 ></body>
37 </html>