Crashtest for bug 464589. b=464589 r=josh sr=roc
authorSteven Michaud <smichaud@pobox.com>
Thu, 04 Dec 2008 11:12:19 -0600
changeset 22344 3dd567dd1322a222dbcaf368512d6167b2343ddd
parent 22343 8b1b316eb0647e282fa7d86cec281a2e9435d4aa
child 22345 9e3d35aea6ee9d2e9c669464a1b6d666413036f8
push idunknown
push userunknown
push dateunknown
reviewersjosh, roc
bugs464589
milestone1.9.2a1pre
Crashtest for bug 464589. b=464589 r=josh sr=roc
widget/src/cocoa/crashtests/464589-1.html
widget/src/cocoa/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/widget/src/cocoa/crashtests/464589-1.html
@@ -0,0 +1,20 @@
+<html>
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+  var o2 = document.createElement("option");
+  document.getElementById("o1").appendChild(o2);
+  o2.style.padding = "131072cm";
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<select><option id="o1" style="height: 0cm;"></option></select>
+
+</body>
+</html>
--- a/widget/src/cocoa/crashtests/crashtests.list
+++ b/widget/src/cocoa/crashtests/crashtests.list
@@ -1,7 +1,8 @@
 load 397209-1.html
 load 403296-1.xhtml
 load 419737-1.html
 load 444260-1.xul
 load 444864-1.html
 load 449111-1.html
 load 460387-1.html
+load 464589-1.html