Add a bunch of crashtests
authorJesse Ruderman <jruderman@gmail.com>
Tue, 10 Feb 2009 00:09:40 -0800
changeset 24814 5a6def05ccbc
parent 24813 22784cc8114c
child 24815 4167419a5f4a
push id5263
push userjruderman@mozilla.com
push date2009-02-10 08:09 +0000
treeherdermozilla-central@5a6def05ccbc [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
milestone1.9.2a1pre
Add a bunch of crashtests
content/base/crashtests/43040-1.html
content/base/crashtests/crashtests.list
content/html/content/crashtests/68912-1.html
content/html/content/crashtests/crashtests.list
content/xslt/crashtests/91332.xml
content/xslt/crashtests/91332.xsl
docshell/base/crashtests/40929-1-inner.html
docshell/base/crashtests/40929-1.html
docshell/base/crashtests/crashtests.list
dom/src/base/crashtests/90613-1.html
dom/src/base/crashtests/crashtests.list
layout/base/crashtests/46043-1.html
layout/base/crashtests/47843-1.html
layout/base/crashtests/49122-1.html
layout/base/crashtests/50257-1.html
layout/base/crashtests/50395-1.html
layout/base/crashtests/89101-1.html
layout/base/crashtests/89358-1.html
layout/base/crashtests/90205-1.html
layout/base/crashtests/crashtests.list
layout/generic/crashtests/37757-1.html
layout/generic/crashtests/crashtests.list
layout/tables/crashtests/28933-1.html
layout/tables/crashtests/29157-1.html
layout/tables/crashtests/32447-1.html
layout/tables/crashtests/78623-1.html
layout/tables/crashtests/crashtests.list
modules/libpr0n/test/crashtests/83804-1.gif
modules/libpr0n/test/crashtests/89341-1.gif
modules/libpr0n/test/crashtests/crashtests.list
modules/plugin/test/crashtests/41276-1.html
modules/plugin/test/crashtests/48856-1.html
modules/plugin/test/crashtests/crashtests.list
parser/htmlparser/tests/crashtests/30885-1.html
parser/htmlparser/tests/crashtests/30956-1.html
parser/htmlparser/tests/crashtests/31392-1.html
parser/htmlparser/tests/crashtests/31694-1.html
parser/htmlparser/tests/crashtests/31940-1.html
parser/htmlparser/tests/crashtests/32613-1.html
parser/htmlparser/tests/crashtests/34168-1.html
parser/htmlparser/tests/crashtests/34168-1.xml
parser/htmlparser/tests/crashtests/41427-1.html
parser/htmlparser/tests/crashtests/44178-1.html
parser/htmlparser/tests/crashtests/46495-1.html
parser/htmlparser/tests/crashtests/50134-1.html
parser/htmlparser/tests/crashtests/50994-1.html
parser/htmlparser/tests/crashtests/58455-1.html
parser/htmlparser/tests/crashtests/60110-1.html
parser/htmlparser/tests/crashtests/73331-1.html
parser/htmlparser/tests/crashtests/crashtests.list
testing/crashtest/crashtests.list
testing/crashtest/images/600x58.png
view/crashtests/38589-1.xul
view/crashtests/64049-1.html
view/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/content/base/crashtests/43040-1.html
@@ -0,0 +1,19 @@
+<HTML>
+<HEAD>
+<META NAME="GENERATOR" Content="Microsoft Visual Studio 6.0">
+<script>
+var xmlDoc;
+
+function createDoc()
+{
+	var xmlDoc = document.implementation.createDocument("", "", null);
+	var xmlElem = xmlDoc.firstChild;
+	xmlElem.appendChild(document.createTextNode("blabla"));
+	xmlElem.firstChild.nodeValue;
+}
+</script>
+
+</HEAD>
+<BODY onload="createDoc();">
+</BODY>
+</HTML>
--- a/content/base/crashtests/crashtests.list
+++ b/content/base/crashtests/crashtests.list
@@ -1,8 +1,9 @@
+load 43040-1.html
 load 308120-1.xul
 load 324871-1.html
 load 325730-1.html
 load 326618-1.html
 load 326646-1.html
 load 326778-1.html
 load 326865-1.html
 load 330925-1.xhtml
new file mode 100644
--- /dev/null
+++ b/content/html/content/crashtests/68912-1.html
@@ -0,0 +1,24 @@
+<html>
+<head>
+<title>Crash TR.cells = null</title>
+<script language="javascript">
+function crashme()
+{
+	var elm = document.createElement('tr');
+
+	elm.cells = null;
+}
+
+</script>
+</head>
+<body onload="crashme()">
+
+<p>
+This test case creates a TR element then tries to assign to the cells property
+</p>
+<p>
+Crash
+</p>
+
+</body>
+</html>
--- a/content/html/content/crashtests/crashtests.list
+++ b/content/html/content/crashtests/crashtests.list
@@ -1,8 +1,9 @@
+load 68912-1.html
 load 257818-1.html
 load 307616-1.html
 load 324918-1.xhtml
 load 338649-1.xhtml
 load 339501-1.xhtml
 load 339501-2.xhtml
 load 423371-1.html
 load 451123-1.html
new file mode 100644
--- /dev/null
+++ b/content/xslt/crashtests/91332.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" standalone="yes" ?>
+<?xml-stylesheet type="text/xsl" href="91332.xsl" ?>
+<root>
+  <category name="Rectangles">
+    <list item="square" />
+  </category>
+  <quad id="square">
+    <desc>A square is ...</desc>
+  </quad>
+</root>
new file mode 100644
--- /dev/null
+++ b/content/xslt/crashtests/91332.xsl
@@ -0,0 +1,21 @@
+<?xml version="1.0" ?>
+<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
+
+  <xsl:key name="polyList" match="quad" use="@id" />
+
+  <xsl:template match="root">
+    <html><body><xsl:apply-templates select="category" /></body></html>
+  </xsl:template>
+
+  <xsl:template match="category">
+    <table><xsl:apply-templates select="list" /></table>
+  </xsl:template>
+
+  <xsl:template match="list">
+    <tr><td><xsl:apply-templates select="key('polyList',@item)" /></td></tr>
+  </xsl:template>
+
+  <xsl:template match="quad">
+    <b>Please output something!</b>
+  </xsl:template>
+</xsl:stylesheet>
new file mode 100644
--- /dev/null
+++ b/docshell/base/crashtests/40929-1-inner.html
@@ -0,0 +1,12 @@
+<html><head><title>Infinite Loop</title></head>
+<body onLoad="initNav(); initNav();">
+
+<script language="JavaScript">
+
+function initNav() {
+	window.location.href='GeneralIndex.html';
+}
+
+</script>
+
+</body></html>
new file mode 100644
--- /dev/null
+++ b/docshell/base/crashtests/40929-1.html
@@ -0,0 +1,6 @@
+<html>
+<head><title>Infinite Loop</title></head>
+<body>
+<iframe src="40929-1-inner.html"></iframe>
+</body>
+</html>
--- a/docshell/base/crashtests/crashtests.list
+++ b/docshell/base/crashtests/crashtests.list
@@ -1,3 +1,4 @@
+load 40929-1.html
 load 369126-1.html
 load 403574-1.xhtml
 load 436900-1.html
new file mode 100644
--- /dev/null
+++ b/dom/src/base/crashtests/90613-1.html
@@ -0,0 +1,7 @@
+<html>
+<body onload="this.focus();" onfocus="document.getElementById('foo').focus();" 
+onblur="/*alert('hello');*/this.focus();">
+<input type="text" id="foo">
+</body>
+</html>
+
--- a/dom/src/base/crashtests/crashtests.list
+++ b/dom/src/base/crashtests/crashtests.list
@@ -1,8 +1,9 @@
+load 90613-1.html
 load 327571-1.html
 load 327695-1.html
 load 329481-1.xhtml
 load 338674-1.xhtml
 load 346381-1.html
 load 359432-1.xhtml
 load 369413-1.html
 load 372554-1.html
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/46043-1.html
@@ -0,0 +1,12 @@
+<html><head><title>Testcase for bug 46043</title></head>
+<body>
+
+<div style="float:right;width:600;background:blue">&nbsp;</div>
+<div style="float:right;width:400;background:yellow">&nbsp;</div>
+
+<ol>
+  <li>foo</li>
+</ol>
+
+</body>
+</html>
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/47843-1.html
@@ -0,0 +1,13 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
+<html>
+	<head>
+		<title>Testcase for bug 47843</title>
+		<style type="text/css"> 
+			BODY {overflow:scroll;}  
+		</style>
+	</head>
+	<body>
+		<P>Blah
+	</body>
+</html>
+
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/49122-1.html
@@ -0,0 +1,20 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"
+      "http://www.w3.org/TR/REC-html40/loose.dtd"> 
+<HTML>
+<HEAD>
+<TITLE>Mozilla Bug 49122</TITLE>
+</HEAD>
+<BODY><FORM action="">
+<TABLE>
+<TR>
+<TD>
+<MAP NAME="blah">
+<AREA SHAPE="rect" COORDS="0,1,1,0" href="" alt="blah">
+</MAP>
+<IMG src="" USEMAP="#blah" alt="blah">
+</TD>
+</TR>
+</TABLE>
+<P>
+</FORM></BODY>
+</HTML>
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/50257-1.html
@@ -0,0 +1,20 @@
+<html>
+<body>
+<div style="margin-bottom: -1">
+<img height=1>
+</div>
+<table align=left>
+ <td>
+  <table>
+   <td>
+  </table>
+ </td>
+ <td>
+  <table cols=2>
+   <td>
+  </table>
+ </td>
+</table>
+<br clear="left">
+</body>
+</html>
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/50395-1.html
@@ -0,0 +1,24 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
+<html>
+<head>
+  <title>Testcase for bug 50395</title>
+  <style> * { overflow: auto; } </style>
+</head>
+<body>
+<h3>In head: &lt;style&gt; * { overflow: auto; } &lt;/style&gt;</h3>
+
+<p>iframe width="40%":</p>
+<iframe width="40%"
+        src="../../../testing/crashtest/images/600x58.png"></iframe>
+
+<p>iframe height="10%"</p>
+<iframe height="10%"
+        src="../../../testing/crashtest/images/600x58.png"></iframe>
+
+<p>iframe height="90"</p>
+<iframe height="90"
+        src="../../../testing/crashtest/images/600x58.png"></iframe>
+
+
+</body>
+</html>
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/89101-1.html
@@ -0,0 +1,22 @@
+<HTML>
+<FORM>
+
+<fieldset STYLE="
+				
+			position:fixed;
+			left:
+			311;
+			top:
+			248;
+			width:
+			371;
+			
+			height:
+			184;
+			
+			
+			">
+<input TYPE="text" NAME="Sub1104001010" VALUE="" TABINDEX="11" MAXLENGTH="10">
+</FIELDSET>
+</FORM>
+
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/89358-1.html
@@ -0,0 +1,10 @@
+<HTML>
+<HEAD>
+<META HTTP-EQUIV="Content-Type" CONTENT="text/html , charset=x-user-defined">
+</HEAD>
+<BODY>
+<PRE>
+<A HREF="http://www.test.net/">http://www.test.net </A> Mozilla-0.9.2 is dying - blah.!?
+</PRE>
+</BODY>
+</HTML>
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/90205-1.html
@@ -0,0 +1,15 @@
+<html>
+<head>
+  <title>Bug 90205</title>
+</head>
+<body>
+  <span style="font-family: serif;">
+    <span style="float: left;"></span>
+  </span>
+  <font size=2>
+    <meta>
+    <form></form>
+  </font>
+  <body topmargin="0">
+</body>
+</html>
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@@ -1,9 +1,20 @@
+load 46043-1.html
+load 47843-1.html
+load 49122-1.html
+load 50257-1.html
+load 50395-1.html
+load 50395-1.html
+load 50395-1.html
+load 50395-1.html
 load 56746-1.html
+load 89101-1.html
+load 89358-1.html
+load 90205-1.html
 load 143862-1.html
 load 143862-2.html
 load 241300-1.html
 load 243159-1.html
 load 243159-2.xhtml
 load 243519-1.html
 load 275746-1.html
 load 280708-1.html
new file mode 100644
--- /dev/null
+++ b/layout/generic/crashtests/37757-1.html
@@ -0,0 +1,1 @@
+<p style="font-size: 1px">Text</p>
--- a/layout/generic/crashtests/crashtests.list
+++ b/layout/generic/crashtests/crashtests.list
@@ -1,8 +1,9 @@
+load 37757-1.html
 load 225868-1.html
 load 302260-1.html
 load 307979-1.html
 load 310556-1.xhtml
 load 322780-1.xul
 load 323386-1.html
 load 323389-1.html
 load 323389-2.html
new file mode 100644
--- /dev/null
+++ b/layout/tables/crashtests/28933-1.html
@@ -0,0 +1,10 @@
+<title>test</title>
+
+<table style='border-collapse:collapse;'>
+  <tr>
+    <td rowspan=2></td>
+  </tr>
+  <tr>
+    <td></td>
+  </tr>
+</table>
new file mode 100644
--- /dev/null
+++ b/layout/tables/crashtests/29157-1.html
@@ -0,0 +1,28 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
+<HTML>
+<HEAD>
+<TITLE>test</TITLE>
+</HEAD>
+<BODY>
+<TABLE BORDER=1 ID="TABLE1">
+    <TR><TD>cell data</TD><TD>cell data</TD></TR>
+    <TR><TD>cell data</TD><TD>cell data</TD></TR>
+    <TR><TD>cell data</TD><TD>cell data</TD></TR>
+</TABLE>
+
+<SCRIPT TYPE="text/javascript">
+
+var t=document.getElementById("TABLE1");
+document.write(t);
+
+t.createCaption();
+
+</SCRIPT>
+</BODY>
+</HTML>
+
+
+
+
+
+
new file mode 100644
--- /dev/null
+++ b/layout/tables/crashtests/32447-1.html
@@ -0,0 +1,13 @@
+<html>
+<body>
+
+<TABLE STYLE="position: absolute;">
+<FORM>
+<TR>
+<TD> Test
+</TR>
+</TABLE>
+</FORM>
+
+
+</body>
new file mode 100644
--- /dev/null
+++ b/layout/tables/crashtests/78623-1.html
@@ -0,0 +1,17 @@
+<html><head>
+<script>
+function crashMoz() {
+   var div = document.getElementById( "adiv" );
+   var table = document.createElement( "TABLE" );
+   var tr = table.insertRow( 0 );
+   var td = tr.insertCell( 0 );
+   var text = document.createTextNode( "Hello, World." );
+   td.appendChild( text );
+   td.style.backgroundImage = "url( 'any_image_here.gif' )";
+   div.appendChild( table );
+}
+</script>
+</head><body onload="crashMoz();">
+<div id=adiv></div>
+</body></html>
+
--- a/layout/tables/crashtests/crashtests.list
+++ b/layout/tables/crashtests/crashtests.list
@@ -1,9 +1,13 @@
+load 28933-1.html
+load 29157-1.html
+load 32447-1.html
 load 55789-1.html
+load 78623-1.html
 load 284844-1.html
 load 284852.html
 load 300912.html
 load 322779-1.xul
 load 323489-1.html
 load 331344-1.html
 load 331446-1.xhtml
 load 331690-1.html
new file mode 100644
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..3967c703f6ed93295df71d998d9a3f54a6290f5f
GIT binary patch
literal 37
mc${<hbhEHbWMp7uC}3bv{K>+|00cT90wl)3#N@)rU=09cPXp`#
new file mode 100644
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..14b3892d177ab91383bd5e3914f46f241f959c14
GIT binary patch
literal 769
zc$~G*=}(dY0D$q=JR&tuRCH=KTVrX>&8_o8hs{(xKDf1Nrj;#Owscyqt>!2^!BVr#
z3q?gocz~dQ9AXiQymA<M4Y?CgyiL(i-{v3D^X>QXxfLIK@zO(AfbBL301yP(cK5by
zf7iEnS2k>>l`VsHW6rcT^LtgPTUKb6Wa>r9?1E^@Bv8)t<VKE6KLG0JVr{obO%|%!
z_%j6VR3m$`mieoiK2gytFQ!Pb<nh7|$s3Y5pCHO<5W;S}c0QYS;BW-^51rg~a)txp
zK;$6~p8ywVxGFa;GN@8a${TxjxkW*Kk<fFGdZ(%YTrRk(tGtkSu2F7bWJ#ZMwQDc4
zlBufYCSIXn!46?CLD-_=lG4C(9KPcHhd@O2$C`ke+JL(H2LC2Pvmddwt)0|Cgp<Eg
zy1IOOskFX6pZ)<Ri{;JX^7wqO;cwqPe~3m#M?ECqxKw&vG4WI3J~=f#Gv%h5Q)@J?
zdV}%UyvYn(ShOxJ9bH{p-`H^3+P3ZNINSI34<NwijfkTWuVWp3&ZLQ}S}~<w;R&A*
z#5NHg5&g6qMr<Fg42!`9$J0q;HON#-+8Dh9{1TNZX}X)2DJu8&^mk|Hr1PNsYrc=U
zriyx6yI1b)qYeoiiK_MRbNypZ4xtp@M5`sAJEy4+gt!nCvwN0-R#NVR%pMgh*C-*N
zSiNfQtIb6<$f9Zm7)Q6zL^e$?Ec1;>A7}R&N2|h7&548bd9W@zTQfe$Fw2QC_|POy
z|ALa7+LbQl3|OaWnP77gm$|HB=UX*WE^AdgjCDJa%ww+`#WfKbGTz{(S<#MaN#=95
ztTT*kt&GpLt?GpM6DdQy-A#+KD?>iSx7*f?U`vW%Xy3lGY1PUF0tf<JkUET$KU((|
zcABhv=YHOz!+OOc^+oX8Xnir_30YqfTwn>+mxh%f4P~cl(S~wlC)t3DWLgaPs1c;G
KV#nD5xbhEYRFg;m
new file mode 100644
--- /dev/null
+++ b/modules/libpr0n/test/crashtests/crashtests.list
@@ -0,0 +1,2 @@
+load 83804-1.gif
+load 89341-1.gif
new file mode 100644
--- /dev/null
+++ b/modules/plugin/test/crashtests/41276-1.html
@@ -0,0 +1,28 @@
+<HTML><HEAD><TITLE>Plugin Limit</TITLE></HEAD>
+<BODY>
+
+Mozilla has a hardcoded limit of 10 simultaneously embedded plugins.<br>
+If that limit is exceeded, plugin instances are prematurely destroyed (see the empty boxes below).<br>
+Leave or reload a page that has a prematurely destroyed plugin and mozilla will crash.<br>
+Sometimes, just loading this page will cause mozilla to crash.<br>
+
+
+<br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player">
+<embed TYPE=audio/x-pn-realaudio-plugin WIDTH=300 HEIGHT=75 CONTROLS="Default" AUTOSTART="FALSE" CONSOLE="RA_Player"><br>
+<br>
+</BODY></HTML>
new file mode 100644
--- /dev/null
+++ b/modules/plugin/test/crashtests/48856-1.html
@@ -0,0 +1,10 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
+			"http://www.w3.org/TR/REC-html40/loose.dtd">
+<HTML>
+    <HEAD>
+        <TITLE>Mozilla Bug 48856</TITLE>
+	</HEAD>
+    <BODY>
+        <EMBED></EMBED>
+    </BODY>
+</HTML>
new file mode 100644
--- /dev/null
+++ b/modules/plugin/test/crashtests/crashtests.list
@@ -0,0 +1,2 @@
+load 41276-1.html
+load 48856-1.html
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/30885-1.html
@@ -0,0 +1,17 @@
+<HTML>
+ <BODY>
+
+  <TABLE BORDER="1">
+   <TR>
+    <TD>
+     <A HREF="foo.htm">
+      <FONT></A>
+     <A HREF="bar.htm">
+      <FONT>
+       MacDesktops</A>
+      </FONT>
+    </TD>
+   </TR>
+</TABLE>
+</BODY>
+</HTML>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/30956-1.html
@@ -0,0 +1,10 @@
+<HTML>
+
+<body>
+<table>
+  <td>
+      <li><font size="-1">
+      <li><a href="foo.html"></font></a>
+</table>
+</body>
+</html>
\ No newline at end of file
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/31392-1.html
@@ -0,0 +1,15 @@
+<html>
+<head>
+<title>Crash Test page</title>
+</head>
+<body>
+
+<table>
+<tr>
+<td>
+<LINK REL="stylesheet" HREF="garbagestyle.css" TYPE="text/css">
+</td>
+</tr>
+</table>
+</body>
+</html>
\ No newline at end of file
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/31694-1.html
@@ -0,0 +1,8 @@
+<HTML><HEAD>
+<script src="foo.js"></script>
+<csactions>
+<csaction name="bar" class="foobar" type="ONEVENT">
+</csactions>
+</HEAD>
+<BODY>
+<DD></DD></BODY></HTML>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/31940-1.html
@@ -0,0 +1,15 @@
+<HEAD>
+   <LINK rel="stylesheet">
+   <rdf:RDF>
+   <rdf:Description/>
+   </rdf:RDF>
+</HEAD>
+
+<BODY>
+
+<rdf:RDF>
+<rdfs:Class/>
+</rdf:RDF>
+
+</BODY>
+</HTML>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/32613-1.html
@@ -0,0 +1,18 @@
+<P><font color="003366" FACE="Serif">
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+<P><FONT size="2"></P>
+</FONT><BR>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/34168-1.html
@@ -0,0 +1,1 @@
+<!ENTITY editAwayMessageSpecial3.label " %d = Current date">
\ No newline at end of file
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/34168-1.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0"?>
+<!DOCTYPE foo [
+<!ENTITY  editAwayMessageSpecial3.label " %%d = Current date">
+<!ELEMENT foo EMPTY>
+]>
+<foo/>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/41427-1.html
@@ -0,0 +1,1 @@
+<A HREF=""><font><B>t</A><head><script>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/44178-1.html
@@ -0,0 +1,8 @@
+<html>
+<body>
+<div>
+<server>
+</server>
+</div>
+</body>
+</html>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/46495-1.html
@@ -0,0 +1,5 @@
+<html>
+    <body>
+        <p ">
+    </body>
+</html>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/50134-1.html
@@ -0,0 +1,8 @@
+<html>
+    <head>
+        <title>Mozilla Bug 50134</title>
+    </head>    
+    <body>
+        <!--->
+    </body>
+</html>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/50994-1.html
@@ -0,0 +1,12 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
+<HTML>
+	<HEAD>
+		<TITLE>Mozilla Bug 50994</TITLE>
+	</HEAD>
+	<BODY>
+        <P>
+		<FORM action="">
+            <P>
+		</FORM>			
+	</BODY>
+</HTML>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/58455-1.html
@@ -0,0 +1,15 @@
+<html>
+<head>
+	<title>Computer Market Online</title>
+	<BASE HREF="http://www.computermarket.com.au/">
+</head>
+
+<body bgcolor="#ffffff">
+
+<table>
+<tr><td><a href='prodDetail.asp?id=6007&catid=241'>This shows</a></td></tr>
+<tr><td><a href='prodDetail.asp?id=6007&catid=241'">This does not show</a></td></tr>
+</table>
+		
+</body>
+</html>
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/60110-1.html
@@ -0,0 +1,22 @@
+<HTML><HEAD>
+<TITLE>Edit parameters</TITLE>
+
+
+</HEAD>
+<BODY   BGCOLOR="#FFFFFF" TEXT="#000000"
+LINK="#0000EE" VLINK="#551A8B" ALINK="#FF0000" >
+
+<p>
+Any item you check Reset on will get reset to its default value.
+<form method=post action=doeditparams.cgi><table>
+
+<tr><td valign=top><input type=checkbox name=reset-newchangedmail>Reset</td><td>
+<textarea wrap=hard name=newchangedmail rows=10 cols=80>From: bugzilla-daemon&#010;To: %to%&#013;&#010;Cc: %cc%&#013;&#010;Subject: [Bug %bugid%] %neworchanged% - %summary%&#013;&#010;&#013;&#010;%urlbase%show_bug.cgi?id=%bugid%&#013;&#010;&#013;&#010;%diffs%</textarea>
+</td></tr>
+<tr><td valign=top><input type=checkbox name=reset-whinemail>Reset</td><td>
+<textarea wrap=hard name=whinemail rows=10 cols=80>From: bugzilla-daemon&#010;To: %email%&#013;&#010;Subject: Your Bugzilla buglist needs attention.&#013;&#010;&#013;&#010;[This e-mail has been automatically generated.]&#013;&#010;&#013;&#010;You have one or more bugs assigned to you in the Bugzilla &#013;&#010;bugsystem (%urlbase%) that require&#013;&#010;attention.&#013;&#010;&#013;&#010;All of these bugs are in the NEW state, and have not been touched&#013;&#010;in %whinedays% days or more.  You need to take a look at them, and &#013;&#010;decide on an initial action.&#013;&#010;&#013;&#010;&#013;&#010;&#013;&#010;</textarea>
+</td></tr>
+<tr><td></td><td>2.11</td></tr></table>
+<input type=reset value="Reset form"><br>
+<input type=submit value="Submit changes">
+</form>
\ No newline at end of file
new file mode 100644
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/73331-1.html
@@ -0,0 +1,27 @@
+<html>
+<head>
+<script>
+function crashme() {
+  var obj = document.getElementById('popupid');
+  obj.style.visibility='hidden';
+}
+</script>
+</head>
+<body onload="crashme();">
+<a href="http://www.mozilla.org/">http://www.mozilla.org/</a>
+
+<div id="popupid">
+<font>
+<script>
+  document.write('<form>');
+  document.write('<span>');
+  document.write('<input>');
+  document.write('</span>');
+  document.write('<br>');
+  document.write('</form>');
+</script>
+</font>
+</div>
+
+</body>
+</html>
--- a/parser/htmlparser/tests/crashtests/crashtests.list
+++ b/parser/htmlparser/tests/crashtests/crashtests.list
@@ -1,3 +1,19 @@
+load 30885-1.html
+load 30956-1.html
+load 31392-1.html
+load 31694-1.html
+load 31940-1.html
+load 32613-1.html
+load 34168-1.html
+load 34168-1.xml
+load 41427-1.html
+load 44178-1.html
+load 46495-1.html
+load 50134-1.html
+load 50994-1.html
+load 58455-1.html
+load 60110-1.html
+load 73331-1.html
 load 423373-1.html
 # load 460706-1.xhtml
 load 468538-1.xhtml
--- a/testing/crashtest/crashtests.list
+++ b/testing/crashtest/crashtests.list
@@ -43,15 +43,17 @@ include ../../layout/svg/crashtests/cras
 include ../../layout/tables/crashtests/crashtests.list
 include ../../layout/xul/base/src/crashtests/crashtests.list
 include ../../layout/xul/base/src/grid/crashtests/crashtests.list
 include ../../layout/xul/base/src/tree/src/crashtests/crashtests.list
 
 include ../../gfx/src/thebes/crashtests/crashtests.list
 include ../../gfx/thebes/crashtests/crashtests.list
 
+include ../../modules/libpr0n/test/crashtests/crashtests.list
+
 include ../../parser/htmlparser/tests/crashtests/crashtests.list
 
 include ../../security/manager/ssl/crashtests/crashtests.list
 
 include ../../view/crashtests/crashtests.list
 
 include ../../widget/src/cocoa/crashtests/crashtests.list
new file mode 100644
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..500970bdfab5147f42af21f220aebf4c902d49f1
GIT binary patch
literal 5339
zc$@*-6eR13P)<h;3K|Lk000e1NJLTq00LM50024&0ssI2<EOCm000j#X+uL$Nkc;*
zP;zf(X>4Tx0C)kdSa~><-`hXKjD26m&e(SbW6wIsI%Fqd7|Ylj`x44hqNK%AM2eIU
zm91n;s1!wZWle=dmKJ%Rp}ybux_;O1djEOv>ze0$&gb0seU|$?=brNbz%qdk3k#wE
z00f6bkZcbcqMTh^QPiUV1`vQAr~xs&cX*hAjg2Lw@?T{0Eu;;}8+o!X+>I*@x^?Na
zGfo+4l_{Rd|HbGp%|wDa1OO%n5gdN|Sf7l&_OU$~M@NK3Ksx?p?Cp;yKsW)yawL0O
zEQBi{%;dL^8_C#fANP=Pl(!$*b_4(_wh#g_1OVzK2<sAj!o8tpa=!#ZxOXsw&p~>>
zgM&jM|11y&Qr=-C$d-ldQ;fVWPzecP3ji%R<YVk#E<hN7ss{k@3;)YWJ_djr55QfS
zf4Ozry|scNUxoXsDDSz0F&F}XnA+W4mw?809)O*k-QAz1ySqEr0ic`!pe@Kdk`%S4
z3k?v~2f+VT-=Fgz3rZ+BP=F~EDRFRr#4)M@>bo=@v?Fw%>DL(Pn7EjQS>#!@*bLY$
zIqW%|knUXG+(e!*-f+GM{z!os!FZu$RH|^Q$Vt)DVrRuKNnDXEk*bick!h6emK&0v
zR@g+-DTyens5oHaRZG;Ksc&maYvHx89GKJ<(j)3O7&2gw7~L~rJ4iAeFjurVWBC<l
zX<dDY**3`TnFF6=kkexqCRdNc6>i_$u^y*A`@ERFtqJFSUis1a8xSJ{sspEk*+Yy%
zqr>hT9Ses?pd&q^vZ5cwEXJ|M>n4O9D^BcAnn<2GK7V2<Wi@pzZ8Lr66g-3BG;1bj
zmcSXQvntuz=L~X8&mX$rc+vHed#-mLF+Z>%@G|iVu`r;>|0=%NwZ!h4MXCOEr5n;^
zlI7wzMJiCY1a9+Ga^7LBVyR}RLDc-dyIs3pw|sB@{`iA|`WFqIjZICp&37K&dUUNN
z_wm`*(`~8k$2;OWNl!w$LY@Y7<9o2Z$ljS}b<dMtnD=q@Exf${Dz)EsKxkn3b=#Yq
zL60H%p&xIb59f{GN99Mqk3AjFo^YHLn4FucdPjP%_Wt{H^Gy7#*6ik7{d~fL!3W9@
zy^C2Nai3T|z4@HC<h;ziJhGDi#d(!`b?9r(8g89&z4u${hQY?}=HsonZPo47?^Qnn
ze@g#c_*J^&`CI7s*zVEYT`2x=N;WtW!9m4I%}hg2OGCRu_nrO=!yMx%Qy+6XOD$_D
z+eP*?j%dz6<Pk1wZY+-`uNt2mzoLMGpqh{_%2-%WL_<_wOio-*LPioTB`1xRQIo~W
znaevX5EWz58A?UU^(wD0D{8Fj7!5nkIIWx7!#Xs&s(MHDs|*&gvPOZ%H747p#%7u3
zBbG{53Ah0pzC(Vt_4Y6aE64Lr6E4!OVTbG7w%j#5j(N7?cf7R;Q9cd6>;4MFfPmY9
zpMoVq+(Pri-jdkE?IUs`pGDKeSjL`>>x!RE_<Zb3;zrW<<R8a>ryx=p(%92^P70h7
z%Rryj$~4R}J7ay;Ios`=XAa?fz=hC@VV6j`p?M+sVFkgLeXn>HIv3eoH7-^wk-sKi
zDtBEP+6PkQ5;w&vL~n`R7OfPz!(YW)%~QjDm$R0wj`<$*eWnMD^^6UyjmReMX6}c4
zk5Da=j}=-~+cet^J8+$@PY!n-e2RLy*4^7v*c<%J;5pax<riIj1uuhNVfzL8HwXG&
zm%fP}#0`lIZM^LrE*uFRH5g+Zn;gG0kuYgG#X2?quJnDtw8Hf2OylgiIsbXR1+InV
z4^I{gK8AcU{>=0F)6%2mGb=~FD17<3+WqzXn)|x+`r5aL8|j-iTija{+oj)$KhQt6
ze?Iz^ykq>E>G!MM;QjbhY*DVlzahR*EmJSkEYnWWjnfY@JZEfSs%9=`$z+XYBS2>W
znv<Dx9XY^N$(_pM#*5}d@D1~q2}BAS3o#2#qRNDWMYKezMBj?t5>J$Hkd%|6k@_Ir
zEmI+TMlM4Bu!5nY0-9fmR%uIlUS$B&rg~ScNIgR%N)xYTseRx8N{32kRd-15f&K-9
zC_^IF$;iZ5!$jgBw<*GO)9j=9s6~%uy;V6b-#Wu42HG2rc9!<q4swn{PDp1)7Ydhe
zt{)H2xQ!hdbno-%^n8qO@oM(2BV6~%@Fn?q_?r?H19$_e12=-^f(Jq#hgOG`9?d14
z3Xh5Kk93d1MeD{W#tO%A#KYs)6W$+tnfN%VGWp{1q!Yd=)~T2@WI8N;>*VsO*^IH%
z{h8fa&1Y)PR%92R%gjkSA9jIo(czLwE+$VbpR)i_@a^*am65`}qQ_V76c?3TxRzF$
za6R+}zRaoo&`q-n?OP(Z!R?94M|bk8NY&Og3U`_AuGIF`-MW`~KlFiJy=nupVXJYX
zsinE-Vd5iv3-+;iE24F_t+TznBefI%M5l|lYx8M;cUeznZ{f4{=QA&MU-G`v>~|eV
zcwP9WXK?u~|FHE)=ID!Y_6g6)rg!Y`lcvAT9-n7gxVdQaiS_f_<?1iFUvt)rHfpyP
zexQDN{!S#ve?Rw;a{`qb0Qr#sI8Os$TLwV(4wUK`06;={)P@lNdrbiA$Of>=GypTq
z27mGgWJm#M04op#@<0#RgCLL&u7f9F9!3XKhPlB`!5U#7DFi4SD9%zmqokoUrOc!p
zfb+r$@LKpT!WwZM@tw+s>NYi;8c*FuBTSP*vq)=2TT91FmrA!p??m6hpv+LjNX;0@
zIKyPk)WR&woX<kd63#NsYQx&XCd-!3j$n^upXadSXy-(8mLS=XX~^$fL0s>-UASNI
z9OP-^J-}Pfr^eUJugl*dU@Fir=qxxdL=xIXWeE!k-xDztnHG%~;}EMAw-H~H$dlBS
zoR!Lw)|6h5xg={OyDnEQ@2<eD(65+*HdX>kEy_tMh8RjrhiaOdrMjR7g~p2JuvUlm
zy#r-B7j@J0qV)p|ybX_F?Tk!~4Nde8>YM7D>6;(4u(5Qt^1+2!r`Y5js<rL4n|6RX
zN;+9NN4u1|4!bcQ(Q^0pxaiq|U-y<IxclV!_W4s04+dle_64(qIEI#leIXfyXGXk>
z!bE4pOvK5@pG;UxG)gK;{&~VNr72A)J@MpNhTiE1S#D?fvxjmDE_huM&Ha>LeL1nv
z>MDEj^tJlyIc0>KrneL-Iqv+dUb*|BZtnh6{bJ+BLxvX7R$O~%XHr*5cXRL53+k8X
ze&^Tc27897MzQ0WlN0YHW)kLxKFEAL_IY;2eD&5k{YLoK+z*pqkI4H65=uY^IDr`S
zuh0_sfaBmA=mZ~OY%pC|Fsv9hM8Qa5N|8?Sl#-Uxnlg`a8ZHZugLfmi5&no~Dkdr-
zRX4RXbq4ik8XKDXw1TuJX}{9B()G}*(w8!@F{ChTGWs!&L6L7~R%O1;BFb`^m4)>r
z>u<Iwwl#Jl`!vU4j<=jR&SyvyWILA*S0lGNcLR?KPc^R+Zw;RkUn3OtP5}#nAwdtp
z6`=$aEh=AFMz~GHL1alZT})7{N!(F<6N<XF<hWF_w50SanHX7=Y>!;Hys-SBLaL&Q
z;v70p$y8|v%3>iHG0ceSIW;SFr23}DjOKH#dhMGBF6(6I#_0v=dl)zw9>SU$=@_e<
zU=CtT)y!1Qbu3IQZLC~zzSgleS%=DPTkVGJw;TnW44s2r@?BrJA&#Kkojgu@-p9{)
za}Z2@5`Am^7Kow&_`u?zsSy59kFc_%E8)r!v5`-rnPMDc3*+V!)Q+VmzD^c89(1B9
zl`##UUVZXMhSljhD4*?QSLC=~;JNrBHzi-aVB<=CQAn{=$zti<8`0(Z73{Y@R6eS@
zR1;O}b<g5~T7y!P!b41pPOEb}q0^vCshhW#;n~iM?UyV4A76hP{54EJ$~%skbb1#*
zT{`<_0ltX&6u5MMW$UZX`tgm|+tNQszXtz_KRw_A5<nAJ1AmYT%0M?*h9O~CSU9X4
zHbub&z596-Q<M^v5tL8i{P1Y_5JCe{LPbXv59J(x>KPhOnkm{NQ0DQXo2MtzuQEh4
z>@sFBA(={<6`5OE4zbL$9%JKRt7f-iU*^c+ROg&PW^o<hTH?OJ<Hak+JH&UE-&6o5
z&?cBDWQc;Jx`oe)92S)l-4N>(&y@(2#7ZHhzDmE4xhZ>G&P`rdK}3;KaUR{PRHdA!
zavbBUic>qFuB4%^siUQ@ZFay(2d^8b7p0$KaLMo{_MTCP@sP=9Q@9zoxvGV|Ww_OO
z+<oiuLsYgHI}iJ8hh8U`vw=&JYquNc5li<(k4DcGFKKTAq1<QDPr^Tl*c=ECvJbu%
z@-58bXgO&&!X>gPnkObY_H{fap*WE$$v?UO1SX|8jVV3q<aoxx)9qP~XST9)a#YSw
zUQEgr$?GZzyuw%5e$~5#{#w)ZfHIEqo{Hq#YL!b>Wi^Ca>AIEsRrRrr7R`bW*IHh-
zHnhifEIz??J?cjH+<qqb{6Zhq%h*@z11_&$4r&Y)4}%ex(YxdD35Ut6Q&aE7rrl=F
z%s!kOncw)pu_*gd{}b-B?UMDf)r$ESy;bF}s5QE^FY5!}syDJWiCc!-EZbAx@BE1S
zY4(fj*W^yo?@n_3_wP%4=KvixG$@pWvcwwgRsa7U!9kJGoor87peI9!7tR_g*`Qy4
zc$A$nRFe4_U!sZGAG}7u8(Bb@AG#V*#Q9@!5QcIYOwgBPVhdr&7A6ybH@AT>6NC@=
zggDs!;myM$49Pm&5bx#_Zv2;zi1W91`lFvtinMiruo$FsF)-AEtWWmeNboWGGalHJ
zkRY5T#3LbokQiaMcV~t0Ctw2bfCT)Y(^4KfGqJ!3V&?XkzjepGI`N<OeJy$5yJr~%
zS%!l^umITvdk{~M0P2sQUf>OJco6cJL06(bqJRCZL4Acn89Efw`D?N783oz>Z6N{z
zg#Uvl_Y+*_8<ig#tL5kqmw+q7RpEwk9k?!B6QJNoI4_WgW8fNa1GpYs8*0;hxzw=q
zPe1!}_WEZ=7SK3+KqNF0A853H=lvhO0wVMcV(;z^tt6m=;#}xSMy=cN$>j2XON37h
zbT0=08yXf%BKrA9pbVfd4?c1zvk-3uIg~OQtqJ}IMw&<L7t9MH000GMNkl<ZcmeH|
zQFhxf3<Tre|IVqKG<vopSt5xg0Al))DhdSxvrF#n<LBS)cDp}*|9tb%y`cNUt(l_=
zNAGnXQu$6`gRngu332rP^uyBy-IcpP)U`zAJAn<t_Hd-s(fiX6PZxAo?*35M5|!@+
zHVE6pZ>9cxE#n6SY7zMS{H!%F)9MLeDm`P>4yA(-<Em^`xGttDEWT=VOr;|GQ@3;w
z{y?z*ALH6HEng8+mA3!@R0Ie@6<JYTZbK2+%4IQCS@n_rTY7@9>=Ae!oFnl{gx`k=
zV5(t+SqtQn{xt}5b)VHE#rnon#RO+u2nY!%?vvLb)U~hZUe_&^QxL#ZDP&SKiS!Dp
zWoyn0LLFj`gpO_5%9sl2%MvI!_zFR&la1R@$F^)`OojAi34|S-AoP)j+t7zQyFy?^
z0^BEqsuF~Q0K<LGkq9TrtcH+&7U@F!6fqS+Sjf|ZqZT<5gOry19O;*o)pw{+rfLqt
zP~H0q$?jGJFqIX_bajwEon-MF?l4tz5b7v&bgyfM$`F7+Y69FRspXs8e4rrIP0o?f
zu?=1s>4OWDu{}(cQMLCymk7f52uA+Okr<(u`dg$=Enm#$F_o7t1fdss_JzPc0dB*6
zF1#HefT`ZYBM9H~ar-OAbwj`I#+YhdZQUkY!&C&Jn}NJGUc<Ov^w@Wo0H)f-!pkfK
z?1PXakwts+K9SxWDFrcASr5#V-aZJ+%EsV20yB?<ZVD=gB7mtv$uYB;-_mCa!r$G`
zWXE1h62MeT%IZ55rt;<Av3sT<>=^IjCm8o4D3)C(fT^ytVkHE82@r%@{@jLIz9p+;
zs*<w*8ye|F(i4Otu=27T2|40=8(^w>n*X1;xby^JS?3=PUi?TLa^VjUfIvHe6!*zt
z5T@w9T@=3XB!H<r>AUWY^se~V+}zMqhe4<#XV|^2Nh;?efT?onW!Np!8^SDG${`4K
ztT_@owq+}0Dx@z<pw8e+1))whZbKbgDnp<e0q&D%iW7v+if|;H1@PM*>HXL*yECTh
zla?Ut<Cfqnjzj{HG%X^%hHL4nYnzH7ENyOvhd>j7wQs{F6fCwP5W!UaK^UQXD<!DY
zL;&fVaIyFb0Zes;5^I_WTsKvJ5H>Z`wD@}WO=Vdep8(Rw*C<_wm@1uQ^BayBggOcw
z2_4(um61NUKpES^R2fy<?YUME?jqnN1V#vO8;;Q9+g$>fY8Q*{B|&Jz7USA*q{;&U
zO!WYRM;ii|YL_EHxQivwON<*xj8$5}RI4b-95w_9LK}`5t8g1;R4sVVm@2qHy7p2_
zPY~*iQMYpHBT-kj*pp+b*!l>&n;^X~2q$zeWKZdk1Ta-dS!fCZDG6-%i7*ItV7Bgc
zTTr<g0Zdg*@oiqD-%yl&NEw7WwKx(wwq+}0Dx@z<Aj{wc;UuNF4JU!Fv<;@Jr1sOS
zNdJUm_!ok37@>Coj)b=Y><@u;2-Lh!2*Pz7Y(7cNBVmp)V?m_Ps9NxzBb(|x2qSkN
zTzJ|$B7mum$SnUJ>6e#y{($4AIuAnKRO8+2dZRJ~Adrgy_en0jLUrpIggOu$2_4(u
zm61NUKpES^R2fxk>Uqr|Y(mhqm?P1IYo*0Vzml3kX2DcJgdhlm2=T#@h@!;wK9GJo
z^7S{wR81NagiW|u41r7pxD7L@m891tO+^qUao<3jOB#282cH@cz*GhhDe+9e(NqRO
z=-B-;Mt+-30O@BFFR&k`Dj;&W5e<S+Hxoxf$2NFnqz^7o#`Z8(M%7GuK9xRn5Sk#M
t2m~GpoF0kC#XLjc3IR-Yg;L}-e*x<W<S~!oz*PVM002ovPDHLkV1n8(EY|=4
new file mode 100644
--- /dev/null
+++ b/view/crashtests/38589-1.xul
@@ -0,0 +1,10 @@
+<?xml version="1.0"?>
+<?xml-stylesheet href="chrome://global/skin/" type="text/css"?>
+
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+		<scrollbox>
+			<stack>
+				<box left="50" top="50" style="opacity:0.3;">p </box> 
+			</stack>
+		</scrollbox>
+</window>
new file mode 100644
--- /dev/null
+++ b/view/crashtests/64049-1.html
@@ -0,0 +1,14 @@
+<html>
+<head>
+ <title>Testcase</title>
+</head>
+
+
+<body >
+
+
+
+<iframe id="page" width=2000000 height=2000000 src="data:text/html,Q"></iframe>
+
+</body>
+</html>                                                                     
\ No newline at end of file
--- a/view/crashtests/crashtests.list
+++ b/view/crashtests/crashtests.list
@@ -1,4 +1,6 @@
+load 38589-1.xul
+load 64049-1.html
 load 323497-1.html
 load 382756-1.xul
 load 387745-1.svg
 load 429315-1.html