Bug 1286458 - Add crashtest. r=lsalzman
authorvincentliu <vliu@mozilla.com>
Mon, 15 Aug 2016 16:01:34 +0800
changeset 309414 ebadba7031f64885f04cb2b61d93ecb96959d695
parent 309413 cc7ac901d275d4a36b06daf43bee179e9b319164
child 309415 9e7be56f14ea48ed302d03db135064fb548be86a
push id20308
push userkwierso@gmail.com
push dateMon, 15 Aug 2016 22:04:54 +0000
treeherderfx-team@2697bf7ad45d [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerslsalzman
bugs1286458, 100644
milestone51.0a1
Bug 1286458 - Add crashtest. r=lsalzman --- dom/canvas/crashtests/1286458-1.html | 20 ++++++++++++++++++++ dom/canvas/crashtests/crashtests.list | 1 + 2 files changed, 21 insertions(+) create mode 100644 dom/canvas/crashtests/1286458-1.html
dom/canvas/crashtests/1286458-1.html
dom/canvas/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/dom/canvas/crashtests/1286458-1.html
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+    var canvas = document.createElement('canvas');
+    var ctx = canvas.getContext('2d');
+    var path=new Path2D();
+    path.bezierCurveTo(436,Number.MIN_VALUE,620,Number.MAX_SAFE_INTEGER,1,83);
+    ctx.setTransform(1,Number.MAX_SAFE_INTEGER,1,0,1,146.0);
+    ctx.scale(16777218,55);
+    ctx.stroke(path);
+}
+
+</script>
+</head>
+<body onload="boom();"></body>
+</html>
--- a/dom/canvas/crashtests/crashtests.list
+++ b/dom/canvas/crashtests/crashtests.list
@@ -30,9 +30,10 @@ load 1244850-1.html
 load 1246775-1.html
 load 1284356-1.html
 load 1284578-1.html
 skip-if(d2d) load 1287515-1.html
 load 1287652-1.html
 load 1288872-1.html
 load 1290628-1.html
 load 1283113-1.html
+load 1286458-1.html