Bug 812879 - Crash tests.
authorJesse Ruderman <jruderman@gmail.com>
Fri, 18 Jul 2014 17:01:55 +0000
changeset 216873 6047dff1521cb2a900fb92c868b9fb783729237a
parent 216872 60f4f19178e77b1f7fbbf0117f60771f78b32ee8
child 216874 88df072cf29b72546a84ef7791db92b65a6c1ea5
push id515
push userraliiev@mozilla.com
push dateMon, 06 Oct 2014 12:51:51 +0000
treeherdermozilla-release@267c7a481bef [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs812879
milestone33.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 812879 - Crash tests.
layout/generic/crashtests/812879-2.html
layout/generic/crashtests/812879.html
layout/generic/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/layout/generic/crashtests/812879-2.html
@@ -0,0 +1,35 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+  var table = document.createElement("table");
+  var tbody = document.createElement("tbody");
+  var td = document.createElement("td");
+  tbody.appendChild(td);
+  table.appendChild(tbody);
+  document.body.appendChild(table);
+  td.style.marginTop = "126102421%";
+  td.style.marginLeft = "126102421%";
+  td.style.cssFloat = "right";
+  td.style.pageBreakInside = "avoid";
+
+  document.documentElement.offsetHeight;
+
+  tbody.style.overflowX = "hidden";
+
+  document.documentElement.offsetHeight;
+
+  document.body.style.MozColumns = "auto";
+  tbody.style.color = "red";
+
+  document.documentElement.offsetHeight;
+}
+
+</script>
+</head>
+
+<body onload="boom();"></body>
+</html>
new file mode 100644
--- /dev/null
+++ b/layout/generic/crashtests/812879.html
@@ -0,0 +1,6 @@
+<!DOCTYPE html>
+<html>
+<body onload="document.getElementById('x').style.overflowX = 'hidden';">
+<table><tbody id="x"><tr><td style="margin-top: 126102421%; margin-right: 126102421%; float: right; page-break-inside: avoid;"></td></tr></tbody></table>
+</body>
+</html>
--- a/layout/generic/crashtests/crashtests.list
+++ b/layout/generic/crashtests/crashtests.list
@@ -489,16 +489,18 @@ asserts-if(!Android,8) load 798020-1.htm
 load 798235-1.html
 load 799207-1.html
 load 799207-2.html
 load 801268-1.html
 load 804089-1.xhtml
 load 807565-1.html
 load 807565-2.html
 load 810726.html
+load 812879.html
+load 812879-2.html
 load 825810-1.html
 load 825810-2.html
 load 827076.html
 load 840818.html
 load 812822-1.html
 asserts(1) load 824297-1.html # bug 399262
 load 826483-1.html
 asserts(1) load 826532-1.html # bug 399262