Bug 1286458 - Add crashtest. r=lsalzman
authorvincentliu <vliu@mozilla.com>
Mon, 15 Aug 2016 16:01:34 +0800
changeset 309390 ebadba7031f64885f04cb2b61d93ecb96959d695
parent 309389 cc7ac901d275d4a36b06daf43bee179e9b319164
child 309391 9e7be56f14ea48ed302d03db135064fb548be86a
push id30561
push userkwierso@gmail.com
push dateMon, 15 Aug 2016 21:20:49 +0000
treeherdermozilla-central@91a319101587 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerslsalzman
bugs1286458, 100644
milestone51.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1286458 - Add crashtest. r=lsalzman --- dom/canvas/crashtests/1286458-1.html | 20 ++++++++++++++++++++ dom/canvas/crashtests/crashtests.list | 1 + 2 files changed, 21 insertions(+) create mode 100644 dom/canvas/crashtests/1286458-1.html
dom/canvas/crashtests/1286458-1.html
dom/canvas/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/dom/canvas/crashtests/1286458-1.html
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+    var canvas = document.createElement('canvas');
+    var ctx = canvas.getContext('2d');
+    var path=new Path2D();
+    path.bezierCurveTo(436,Number.MIN_VALUE,620,Number.MAX_SAFE_INTEGER,1,83);
+    ctx.setTransform(1,Number.MAX_SAFE_INTEGER,1,0,1,146.0);
+    ctx.scale(16777218,55);
+    ctx.stroke(path);
+}
+
+</script>
+</head>
+<body onload="boom();"></body>
+</html>
--- a/dom/canvas/crashtests/crashtests.list
+++ b/dom/canvas/crashtests/crashtests.list
@@ -30,9 +30,10 @@ load 1244850-1.html
 load 1246775-1.html
 load 1284356-1.html
 load 1284578-1.html
 skip-if(d2d) load 1287515-1.html
 load 1287652-1.html
 load 1288872-1.html
 load 1290628-1.html
 load 1283113-1.html
+load 1286458-1.html