Bug 1145768 - Crashtest.

2015-11-24 20:04:03 +01:00 · 2015-11-24 20:04:03 +01:00 · 109cdac5f9
--- a/layout/generic/crashtests/1145768.html
+++ b/layout/generic/crashtests/1145768.html
@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="UTF-8">
+<!--
+
+user_pref("layout.css.vertical-text.enabled", true);
+
+-->
+<script>
+
+function boom()
+{
+  document.documentElement.offsetHeight;
+  var emptyTail = q.firstChild.splitText(2);
+  document.documentElement.offsetHeight;
+  emptyTail.splitText(0);
+}
+
+</script>
+</head>
+
+<body onload="boom();"><div style="width: 1px; height: 1px;"><div id="q" style="writing-mode: vertical-rl;">&#x07;R</div></div></body>
+
+</html>
--- a/layout/generic/crashtests/crashtests.list
+++ b/layout/generic/crashtests/crashtests.list
@ -576,6 +576,7 @@ load 1134531.html
 load 1134667.html
 load 1137723-1.html
 load 1137723-2.html
+load 1145768.html
 load 1146103.html
 load 1146107.html
 load 1146114.html