Bug 377522 - crash test
authorMats Palmgren <matspal@gmail.com>
Sun, 12 May 2013 23:09:29 +0200
changeset 131706 94457c73da81a5e98de97471615be37b731a3203
parent 131705 7484f203024eabae8fd3471f751c083ac07bfc98
child 131707 72d8423cb0e39ed6812f04ee12d5d8b01374a00c
push id24671
push userryanvm@gmail.com
push dateMon, 13 May 2013 20:32:09 +0000
treeherdermozilla-central@81dd97739fa1 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs377522
milestone23.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 377522 - crash test
layout/generic/crashtests/377522.html
layout/generic/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/generic/crashtests/377522.html
@@ -0,0 +1,18 @@
+<html>
+<head>
+<script>
+
+function boom() { 
+  var div = document.getElementById('div');
+  div.appendChild(document.createTextNode(String.fromCharCode(8238)));
+  div.appendChild(document.createTextNode(String.fromCharCode(50377)));
+  div.appendChild(document.createTextNode(String.fromCharCode(50)));
+  div.textContent = div.textContent.slice(1);
+}
+
+</script>
+</head>
+<body onload="boom()">
+<div id="div" style="word-spacing:2px; text-align:right">x</div>
+</body>
+</html>
--- a/layout/generic/crashtests/crashtests.list
+++ b/layout/generic/crashtests/crashtests.list
@@ -89,16 +89,17 @@ load 371348-1.xhtml
 load 371561-1.html
 load 371566-1.xhtml
 load 372376-1.xhtml
 load 373859-1.html
 load 373868-1.xhtml
 load 375462-1.html
 load 375831.html
 load 376419.html
+load 377522.html
 load 379217-1.xhtml
 asserts(1-2) load 379217-2.xhtml # Bug 439204
 load 379917-1.xhtml
 load 380012-1.html
 load 381152-1.html
 load 381786-1.html
 asserts-if(gtk2Widget,0-2) load 382129-1.xhtml # Bug 540078
 asserts-if(gtk2Widget,0-1) load 382131-1.html # Bug 540078