Bug 350370 - crashtest.
authorMartijn Wargers <martijn.martijn@gmail.com>
Sat, 26 Jan 2013 14:15:29 +0100
changeset 119944 1b4983feaedc0d4dea512cb6ebf9f42550ce227a
parent 119943 7a72c01c68b9407e932d9b3e6eb9a4201551d78c
child 119945 a0b0b899cf1e7a7718d7eacc2ccae098ae1dd94f
push id21967
push usermpalmgren@mozilla.com
push dateSat, 26 Jan 2013 13:15:19 +0000
treeherdermozilla-inbound@ccbdf81cfb73 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs350370
milestone21.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 350370 - crashtest.
layout/generic/crashtests/350370.html
layout/generic/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/generic/crashtests/350370.html
@@ -0,0 +1,42 @@
+<html><head>
+<title>Testcase bug 350370 - Crash [@ nsStyleContext::FindChildWithRules] with ::first-line, appending rows and table-cells, etc</title>
+<style>
+#b td::first-line { font-size:110%;}
+nobr::first-line { font-size:110%;}
+
+#b td::after { content:"anonymous text"; }
+nobr::after{ content:"anonymous text"; }
+
+#b::before { content:"before text";}
+#b td::before { content:"before text";}
+</style>
+</head>
+<body>
+<table style="display: table-row;"></table><nobr style="display: list-item; -moz-column-count: 2;">
+<table id="b" style="display: inline;"></table>
+</nobr>
+<br>
+This page should not crash Mozilla
+<script>
+function doe(){
+   var td = document.createElement('td');;
+   td.setAttribute('height', '50%');
+   var tr = document.createElement('tr');;
+   tr.setAttribute('height', '50%');
+   tr.appendChild(td);
+   document.getElementsByTagName('table')[1].appendChild(tr);
+   document.body.offsetHeight;
+
+   var td = document.createElement('td');;
+   td.setAttribute('height', '50%');
+   document.getElementsByTagName('tr')[0].appendChild(td); 
+   document.body.offsetHeight;
+
+   var td = document.createElement('td');;
+   td.setAttribute('height', '50%');
+   document.getElementsByTagName('tr')[0].appendChild(td); 
+} 
+setTimeout(doe, 60);
+</script>
+</body>
+</html>
\ No newline at end of file
--- a/layout/generic/crashtests/crashtests.list
+++ b/layout/generic/crashtests/crashtests.list
@@ -46,16 +46,17 @@ load 342322-1.html
 load 343206-1.xhtml
 load 344557-1.html
 load 345139-1.xhtml
 load 345617-1.html
 load 348510-1.html
 load 348510-2.html
 skip load 348887-1.html # bug 623091
 load 348991-1.xhtml
+load 350370.html
 load 354458-1.html
 load 354458-2.html
 load 355426-1.html
 load 359371-1.html
 load 359371-2.html
 load 363722-1.html
 load 363722-2.html
 load 363848-1.xhtml