Bug 851418 - Crashtest. r=bholley
authorJesse Ruderman <jruderman@gmail.com>
Wed, 01 Oct 2014 13:52:44 +0200
changeset 208193 df8c49b33b2219add48ed17521fc35fc77757f87
parent 208192 9956ea441d9174d35dc3ddf3a40c767f96658bb0
child 208194 89716e3f169df2469a1f82da92ce95163a8ff8bc
push id27580
push userkwierso@gmail.com
push dateWed, 01 Oct 2014 23:26:55 +0000
treeherderautoland@af6c928893c0 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersbholley
bugs851418
milestone35.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 851418 - Crashtest. r=bholley
js/xpconnect/crashtests/851418.html
js/xpconnect/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/js/xpconnect/crashtests/851418.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html class="reftest-wait">
+<head>
+<meta charset="UTF-8">
+<script>
+
+function boom()
+{
+  var frameDoc = document.getElementById("f").contentDocument;
+  var frameRoot = frameDoc.documentElement;
+  frameDoc.write("");
+  frameRoot.setAttribute("onload", "");
+  frameRoot.onload;
+  document.documentElement.removeAttribute("class");
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+<iframe id="f" src="data:text/html,1"></iframe>
+</body>
+</html>
--- a/js/xpconnect/crashtests/crashtests.list
+++ b/js/xpconnect/crashtests/crashtests.list
@@ -44,12 +44,13 @@ load 751995.html
 load 761831.html
 asserts(0-1) load 752038.html # We may hit bug 645229 here.
 asserts(1) load 753162.html # We hit bug 675518 or bug 680086 here.
 load 754311.html
 asserts(0-1) load 786142.html # We may hit bug 645229 here.
 load 797583.html
 load 806751.html
 load 833856.html
+load 851418.html
 load 854604.html
 load 854139.html
 pref(dom.use_xbl_scopes_for_remote_xul,true) load 898939.html
 pref(security.fileuri.strict_origin_policy,false) load 938297.html