bug 308752 - crash test by Jesse Ruderman, Martijn Wargers, Bernd.
authorBob Clary <bclary@bclary.com>
Fri, 24 Apr 2009 10:08:08 -0700
changeset 27719 6336a2d9d0d9be5fa9634fa17b4dcd48bd176a8a
parent 27718 b1207d1e0ea460e1d2b5a8d279540c9c7442ec4e
child 27720 e7bb6f9cd17566cc62ec59adf4bcf0609f256dac
push id6720
push userbclary@mozilla.com
push dateFri, 24 Apr 2009 17:10:36 +0000
treeherdermozilla-central@a1e84240b5c9 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs308752
milestone1.9.2a1pre
bug 308752 - crash test by Jesse Ruderman, Martijn Wargers, Bernd.
layout/tables/crashtests/308752-1-inner.html
layout/tables/crashtests/308752-1.html
layout/tables/crashtests/308752-2-inner.html
layout/tables/crashtests/308752-2.html
layout/tables/crashtests/crashtests.list
new file mode 100755
--- /dev/null
+++ b/layout/tables/crashtests/308752-1-inner.html
@@ -0,0 +1,43 @@
+<html>
+<head>
+<script>
+function init2() {
+var one = document.getElementById('one');
+var two = document.getElementById('two');
+var three = document.getElementById('three');
+var four = document.getElementById('four');
+
+four.appendChild(two);
+document.getElementsByTagName('tbody')[0].appendChild(three);
+four.appendChild(three);
+one.appendChild(four);
+document.getElementsByTagName('table')[0].appendChild(one);
+setTimeout('clickit()', 0);
+}
+
+function doe(){
+four.parentNode.removeChild(four);
+}
+
+function clickit()
+{
+  var evt = document.createEvent("MouseEvents");
+  evt.initMouseEvent("click", true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);
+  document.body.dispatchEvent(evt);
+}
+
+window.addEventListener("load", init2, 0);
+window.addEventListener("click", doe, 0);
+</script>
+</head>
+<body>
+<table style="border-collapse: collapse;"><tbody>
+  <tr> <td rowspan="5">P</td>   <td id="three">6</td> <td>O</td>  </tr>
+  <tr> <td id="four">5</td>	<td>P</td> </tr>
+  <tr id="five"> <td>5</td>	<td>U</td> </tr>
+  <tr id="one"> <td>6</td>	<td>S</td> </tr>
+  <tr id="two"> <td>S</td>	<td>9</td> </tr>
+</tbody></table>
+Mozilla should not crash when clicking in the document
+</body></html>
+
new file mode 100644
--- /dev/null
+++ b/layout/tables/crashtests/308752-1.html
@@ -0,0 +1,9 @@
+<html class="reftest-wait">
+<head>
+<script>
+setTimeout('document.documentElement.className = ""', 500);
+</script>
+<body>
+<iframe src="308752-1-inner.html"></iframe>
+</body>
+</html>
new file mode 100755
--- /dev/null
+++ b/layout/tables/crashtests/308752-2-inner.html
@@ -0,0 +1,35 @@
+<html>
+<head>
+<script>
+function init2() {
+var one = document.getElementById('one');
+var four = document.getElementById('two');
+document.getElementsByTagName('table')[0].appendChild(one);
+setTimeout('clickit()', 0);
+}
+
+function doe(){
+two.parentNode.removeChild(two);
+}
+function clickit()
+{
+  var evt = document.createEvent("MouseEvents");
+  evt.initMouseEvent("click", true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);
+  document.body.dispatchEvent(evt);
+}
+window.addEventListener("load", init2, 0);
+window.addEventListener("click", doe, 0);
+</script>
+</head>
+<body>
+<table style="border-collapse: collapse;">
+ <tbody>
+  <tr><td rowspan="2">r11</td></tr>
+  <tr id="one"><td id="two">r21</td></tr>
+  <tr></tr>
+ </tbody>
+</table>
+Mozilla should not crash when clicking in the document
+</body>
+</html>
+
new file mode 100644
--- /dev/null
+++ b/layout/tables/crashtests/308752-2.html
@@ -0,0 +1,9 @@
+<html class="reftest-wait">
+<head>
+<script>
+setTimeout('document.documentElement.className = ""', 500);
+</script>
+<body>
+<iframe src="308752-2-inner.html"></iframe>
+</body>
+</html>
--- a/layout/tables/crashtests/crashtests.list
+++ b/layout/tables/crashtests/crashtests.list
@@ -19,16 +19,18 @@ load 240854-1.html
 load 266015-1.html
 load 277062-1.html
 load 278385-1.html
 load 282175-1.html
 load 284844-1.html
 load 284844-1.html
 load 284852.html
 load 300912.html
+load 308752-1.html
+load 308752-2.html
 load 322779-1.xul
 load 323489-1.html
 load 331344-1.html
 load 331446-1.xhtml
 load 331690-1.html
 load 339315-1.html
 load 341227-1.xhtml
 load 343588-1.xhtml