Bug 1529149 - A crash test by fuzzing. r=boris
authorHiroyuki Ikezoe <hikezoe.birchill@mozilla.com>
Mon, 30 Sep 2019 19:49:32 +0000
changeset 495742 48c9f6695b18e354ce507e7500de81d3b3b77e4e
parent 495741 85ff3b6ad6bc35874af2011f1f1b23c0b709f9b3
child 495743 c99e076208bbae17b323caa9642bec1095653c52
push id114140
push userdvarga@mozilla.com
push dateWed, 02 Oct 2019 18:04:51 +0000
treeherdermozilla-inbound@32eb0ea893f3 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersboris
bugs1529149
milestone71.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1529149 - A crash test by fuzzing. r=boris Depends on D47565 Differential Revision: https://phabricator.services.mozilla.com/D47566
gfx/tests/crashtests/1529149.html
gfx/tests/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/gfx/tests/crashtests/1529149.html
@@ -0,0 +1,23 @@
+<html class="reftest-wait">
+<style>
+:not(option) {
+  position: absolute;
+}
+#a {
+  background: url(data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=) fixed;
+}
+fieldset:first-child {
+  column-width: 0;
+  filter: invert(3);
+}
+</style>
+<script>
+function go() {
+  a.multiple = true
+  document.documentElement.classList.remove("reftest-wait");
+}
+</script>
+<body onload=go()>
+<fieldset style="scale: 1 9 0.3472">
+<select id="a">
+</html>
--- a/gfx/tests/crashtests/crashtests.list
+++ b/gfx/tests/crashtests/crashtests.list
@@ -179,11 +179,12 @@ load 1508822.html
 load 1509099.html
 load 1513133.html
 load 1496194.html
 load 1505934-1.html
 load 1509123.html
 load 1494062-blob-image-wraplist-clip.html
 load texture-allocator-zero-region.html
 load 1524418.html
+pref(layout.css.individual-transform.enabled,true) load 1529149.html
 load 1541113.html
 load 1535657.html
 load 1566206.html