Bug 1286458 - Add crashtest. r=lsalzman
☠☠ backed out by 4b7cac6613e1 ☠ ☠
authorvincentliu <vliu@mozilla.com>
Mon, 01 Aug 2016 13:40:16 +0800
changeset 307618 6f50eb01832c1c03db9f0bee474c1c725da7e83b
parent 307617 a517dfb9fc0b8512fba4fa28da989758f9347dc6
child 307619 59fa797ab43876d3c44e63bba2b30e30293c3494
push id20188
push usercbook@mozilla.com
push dateTue, 02 Aug 2016 15:14:32 +0000
treeherderfx-team@cbdc4af95b6a [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerslsalzman
bugs1286458, 100644
milestone50.0a1
Bug 1286458 - Add crashtest. r=lsalzman --- dom/canvas/crashtests/1286458-1.html | 20 ++++++++++++++++++++ dom/canvas/crashtests/crashtests.list | 1 + 2 files changed, 21 insertions(+) create mode 100644 dom/canvas/crashtests/1286458-1.html
dom/canvas/crashtests/1286458-1.html
dom/canvas/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/dom/canvas/crashtests/1286458-1.html
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+    var canvas = document.createElement('canvas');
+    var ctx = canvas.getContext('2d');
+    var path=new Path2D();
+    path.bezierCurveTo(436,Number.MIN_VALUE,620,Number.MAX_SAFE_INTEGER,1,83);
+    ctx.setTransform(1,Number.MAX_SAFE_INTEGER,1,0,1,146.0);
+    ctx.scale(16777218,55);
+    ctx.stroke(path);
+}
+
+</script>
+</head>
+<body onload="boom();"></body>
+</html>
--- a/dom/canvas/crashtests/crashtests.list
+++ b/dom/canvas/crashtests/crashtests.list
@@ -29,9 +29,10 @@ skip-if(azureCairo) load 1229983-1.html
 load 1229932-1.html
 load 1244850-1.html
 load 1246775-1.html
 load 1284356-1.html
 load 1284578-1.html
 skip-if(d2d) load 1287515-1.html
 load 1287652-1.html
 load 1288872-1.html
+load 1286458-1.html