Crash tests for bug 456727.
authorSkyLined <skylined@chromium.org>
Thu, 26 Feb 2009 12:50:48 +0100
changeset 23472 4ad867d7a548de0e0547f64dd6d18654e2f69645
parent 23471 39460eaf5d0601dfd93067b44ac7b43a582e4ab2
child 23473 ce70e94d5e1ce10cd5f4acc2faa64ce39bb9bb35
push id780
push usermpalmgren@mozilla.com
push dateThu, 26 Feb 2009 12:10:14 +0000
bugs456727
milestone1.9.1b3pre
Crash tests for bug 456727.
editor/libeditor/html/crashtests/456727-1.html
editor/libeditor/html/crashtests/456727-2.html
editor/libeditor/html/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/editor/libeditor/html/crashtests/456727-1.html
@@ -0,0 +1,8 @@
+<html>
+<BODY onload="
+document.designMode='on';
+document.replaceChild(document.createElement('HTML'), document.firstChild);
+document.queryCommandValue('backcolor');
+">
+</body>
+</html>
\ No newline at end of file
new file mode 100644
--- /dev/null
+++ b/editor/libeditor/html/crashtests/456727-2.html
@@ -0,0 +1,8 @@
+<html>
+<BODY onload="
+document.designMode='on';
+document.removeChild(document.firstChild);
+document.queryCommandState('BackColor');
+">
+</body>
+</html>
--- a/editor/libeditor/html/crashtests/crashtests.list
+++ b/editor/libeditor/html/crashtests/crashtests.list
@@ -2,8 +2,10 @@ load 336081-1.xhtml # asserts (no bug?)
 load 382778-1.html
 load 407074-1.html
 load 407277-1.html
 load 420439.html
 load 428489-1.html
 load 448329-1.html
 load 448329-2.html
 load 448329-3.html
+load 456727-1.html
+load 456727-2.html