bug 326834 - crash test by Martijn Wargers.
authorBob Clary <bclary@bclary.com>
Fri, 24 Apr 2009 10:08:11 -0700
changeset 27733 60280a93b9cd0b79590753a84d8bf8198e0e8340
parent 27732 fea7278a05db82cc756c1aaa4e4744e08cc91a63
child 27734 b0a63ee1ed5fca20669002238a3bd6cd9aeed85b
push id6720
push userbclary@mozilla.com
push dateFri, 24 Apr 2009 17:10:36 +0000
treeherdermozilla-central@a1e84240b5c9 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs326834
milestone1.9.2a1pre
bug 326834 - crash test by Martijn Wargers.
layout/xul/base/src/crashtests/326834-1-inner.xul
layout/xul/base/src/crashtests/326834-1.html
layout/xul/base/src/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/xul/base/src/crashtests/326834-1-inner.xul
@@ -0,0 +1,17 @@
+<window title="Testcase bug 326834 - Crash with evil xul testcase, using listbox/listitem and display: table-cell"
+        xmlns:html="http://www.w3.org/1999/xhtml"
+        xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+<listbox>
+  <listitem label="This page should not crash Mozilla"/>
+</listbox>
+<html:script>
+function doe() {
+var el=document.getElementsByTagName('*');
+document.getElementsByTagName('listbox')[0].style.display = 'table-cell';
+document.getElementsByTagName('listitem')[0].style.display = 'table-cell';
+window.getComputedStyle(document.getElementsByTagName('listitem')[0], '').getPropertyValue("height");
+document.getElementsByTagName('listitem')[0].style.display = '';
+}
+setTimeout(doe,500);
+</html:script>
+</window>
new file mode 100644
--- /dev/null
+++ b/layout/xul/base/src/crashtests/326834-1.html
@@ -0,0 +1,9 @@
+<html class="reftest-wait">
+<head>
+<script>
+setTimeout('document.documentElement.className = ""', 1000);
+</script>
+<body>
+<iframe src="326834-1-inner.xul"></iframe>
+</body>
+</html>
--- a/layout/xul/base/src/crashtests/crashtests.list
+++ b/layout/xul/base/src/crashtests/crashtests.list
@@ -4,16 +4,17 @@ load 140218-1.xml
 load 151826-1.xul
 load 168724-1.xul
 load 289410-1.xul
 load 291702-1.xul
 load 291702-2.xul
 load 291702-3.xul
 load 294371-1.xul
 load 311457-1.html
+load 326834-1.html
 load 322786-1.xul
 load 326879-1.xul
 load 327776-1.xul
 load 328135-1.xul
 load 329327-1.xul
 load 329407-1.xml
 load 329477-1.xhtml
 load 336962-1.xul