Bug 1501518 - Crashtest. r=kvark
authorBobby Holley <bobbyholley@gmail.com>
Wed, 24 Oct 2018 11:09:02 -0700
changeset 491128 d3e5a0aa6867b2be1a9d651bbfc7efd97b928171
parent 491127 39c53a79d86b2aafdbfa41a7cacc86ababf8fca6
child 491129 4b5b1ff23dd7247ed098ac805c60292743f8eb20
push id247
push userfmarier@mozilla.com
push dateSat, 27 Oct 2018 01:06:44 +0000
reviewerskvark
bugs1501518
milestone65.0a1
Bug 1501518 - Crashtest. r=kvark
gfx/tests/crashtests/1501518.html
gfx/tests/crashtests/crashtests.list
new file mode 100644
--- /dev/null
+++ b/gfx/tests/crashtests/1501518.html
@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<!-- Add a few levels of blur to put as at an earlier render pass than the rest of the browser UI.
+     We then trigger a render pass with a larger border and a small rectangle. The border gets drawn
+     in this pass because it goes into the texture cache, and the rectangle gets drawn in this pass
+     because it gets an additional blur. A large item drawn to the texture cache in a pass where
+     the other objects are small will trigger the allocation of a render target that's smaller than
+     the large item, which is fine but triggered a panic before this bug was fixed.
+-->
+<div style="filter: blur(1px);">
+  <div style="filter: blur(1px);">
+    <div style="filter: blur(1px);">
+      <div style="background: green; height: 50px; width: 1000px; border: 10px dotted black;"></div>
+      <div style="background: blue; height: 50px; width: 50px; filter: blur(1px);"</div>
+    </div>
+  </div>
+</div>
--- a/gfx/tests/crashtests/crashtests.list
+++ b/gfx/tests/crashtests/crashtests.list
@@ -164,8 +164,9 @@ load 1325159-1.html
 load 1331683.html
 skip-if(Android) pref(dom.disable_open_during_load,false) load 1343666.html
 load 1408078-1.html
 load 1464243.html
 load 1467847-1.html
 load 1468020.html
 load 1470440.html
 load 1478035.html
+load 1501518.html