Bug 433429 - Crash test.
authorJesse Ruderman <jruderman@gmail.com>
Sat, 23 Feb 2013 11:38:15 +0100
changeset 122750 cc398711f18706b038958577b3b36e25826439cd
parent 122749 4cee281ad01159a87d145bb19d671f81fc9661c3
child 122751 3cb00994014fb1846e5c8fbe6691b91de37f0ebd
push id23469
push usermpalmgren@mozilla.com
push dateSat, 23 Feb 2013 10:38:20 +0000
treeherdermozilla-inbound@ffb9e097d950 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs433429
milestone22.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 433429 - Crash test.
layout/xul/base/src/crashtests/433429.xul
layout/xul/base/src/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/xul/base/src/crashtests/433429.xul
@@ -0,0 +1,23 @@
+<?xml version="1.0"?>
+
+<?xml-stylesheet href="chrome://global/skin/" type="text/css"?>
+
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" onload="boom();">
+
+<script type="text/javascript">
+
+function boom()
+{
+  var listbox = document.getElementById("listbox");
+
+  listbox.removeChild(listbox.childNodes[1]);
+  document.documentElement.style.MozBinding = "url('data:text/xml,%3Cbindings%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%3E%3Cbinding%20id%3D%22foo%22%3E%3Ccontent%3E%0A%3Chbox%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fkeymaster%2Fgatekeeper%2Fthere.is.only.xul%22%2F%3E%0A%3C%2Fcontent%3E%3C%2Fbinding%3E%3C%2Fbindings%3E%0A')";
+  document.documentElement.boxObject.height;
+  listbox.removeChild(listbox.childNodes[0]);
+}
+
+</script>
+
+<listbox id="listbox" style="-moz-binding: url(data:text/xml,%3Cbindings%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%3E%3Cbinding%20id%3D%22foo%22%3E%3Ccontent%3E%0A%3Clistbox%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fkeymaster%2Fgatekeeper%2Fthere.is.only.xul%22%3E%3Cchildren%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%2F%3E%3C%2Flistbox%3E%0A%3C%2Fcontent%3E%3C%2Fbinding%3E%3C%2Fbindings%3E%0A);"><listitem/><listitem/></listbox>
+
+</window>
--- a/layout/xul/base/src/crashtests/crashtests.list
+++ b/layout/xul/base/src/crashtests/crashtests.list
@@ -58,16 +58,17 @@ load 412479-1.xhtml
 asserts(4) load 415394-1.xhtml # Bug 163838
 load 420424-1.xul
 load 430356-1.xhtml
 load 431738.xhtml
 load 432058-1.xul
 load 432068-1.xul
 load 432068-2.xul
 load 433296-1.xul
+load 433429.xul
 load 434458-1.xul
 load 460900-1.xul
 load 464149-1.xul
 asserts-if(winWidget,1) load 464407-1.xhtml # Bug 450974
 load 467481-1.xul
 load 470063-1.html
 load 472189.xul
 load 475133.html