Bug 639733 - Crash test.
authorJesse Ruderman <jruderman@gmail.com>
Wed, 06 Apr 2011 13:32:31 +0200
changeset 67569 80dc22b6c3f66118de8e16ed6e65cc8302a2c10b
parent 67568 0e91598cc3f9c69f951c1d2ed50056488ca5f62e
child 67570 1652e3d8dc1cb5661678028b70457745016f2657
push id1
push userroot
push dateTue, 26 Apr 2011 22:38:44 +0000
treeherdermozilla-beta@bfdb6e623a36 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs639733
milestone2.2a1pre
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 639733 - Crash test.
layout/forms/crashtests/639733.xhtml
layout/forms/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/forms/crashtests/639733.xhtml
@@ -0,0 +1,26 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<script>
+<![CDATA[
+
+function remove(n)
+{
+  n.parentNode.removeChild(n);
+}
+
+function boom()
+{
+  
+  document.documentElement.offsetHeight;
+  remove(document.getElementById("s"));
+  remove(document.getElementById("e"));
+  document.documentElement.offsetHeight;
+}
+
+]]>
+</script>
+</head>
+<body onload="boom();">
+<embed id="e" src="data:text/html,A"></embed><span id="s"><div></div></span><isindex/>
+</body>
+</html>
--- a/layout/forms/crashtests/crashtests.list
+++ b/layout/forms/crashtests/crashtests.list
@@ -40,8 +40,9 @@ load 457537-2.html
 load 478219-1.xhtml
 load 513113-1.html
 load 538062-1.xhtml
 load 570624-1.html
 load 498698-1.html
 asserts(1) load 578604-1.html # bug 584564
 asserts(5) load 590302-1.xhtml # bug 584564
 load 626014.xhtml
+load 639733.xhtml