Crashtest for bug 405271.
authorroc+@cs.cmu.edu
Mon, 14 Jan 2008 17:15:35 -0800
changeset 10268 db772f6c9f3a7d9c108a0967669b52cc371117a8
parent 10267 e52f9487f365dfec3d1eda54001cfe7636487e0a
child 10269 1f9db6cb2bf7fdccdcfa6690532d75638c1feca4
push idunknown
push userunknown
push dateunknown
bugs405271
milestone1.9b3pre
Crashtest for bug 405271.
layout/mathml/crashtests/405271-1.xml
layout/mathml/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/mathml/crashtests/405271-1.xml
@@ -0,0 +1,36 @@
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:m="http://www.w3.org/1998/Math/MathML">
+<head>
+
+<style type="text/css">
+#q { width: 16px; height: 16px; }
+#a, #b { counter-increment: chicken; }
+</style>
+
+<style id="s" type="text/css">
+#a { content: 'x'; }
+</style>
+
+<script type="text/javascript">
+
+function boom()
+{
+  remove(document.getElementById("s"));
+  remove(document.getElementById("b"));
+}
+
+function remove(n)
+{ 
+  n.parentNode.removeChild(n);
+}
+
+</script>
+
+</head>
+
+<body onload="boom();">
+
+<m:mrow id="a"/><m:mo id="q"><m:malignmark><m:msubsup/><m:munderover/><m:munder id="b"/></m:malignmark></m:mo>
+
+</body>
+
+</html>
--- a/layout/mathml/crashtests/crashtests.list
+++ b/layout/mathml/crashtests/crashtests.list
@@ -19,8 +19,10 @@ load 367107-1.html
 load 368430-1.xhtml
 load 370791-1.xhtml
 load 372483-1.xhtml
 load 375562-1.xhtml
 load 377824-1.xhtml
 load 379418-1.xhtml
 load 397518-1.xhtml
 load 405187-1.xhtml
+load 405271-1.xml
+