Bug 1400936: Crashtests. r=bholley

MozReview-Commit-ID: 6Q07StWSog Signed-off-by: Emilio Cobos Álvarez <emilio@crisal.io>
2017-09-23 00:12:33 +02:00 · 2017-09-23 00:12:33 +02:00 · 33296e863c
--- a/layout/style/crashtests/1400936-1.html
+++ b/layout/style/crashtests/1400936-1.html
@ -0,0 +1,26 @@
+<!doctype html>
+<style>
+fieldset:invalid {
+  border: 10px solid red;
+}
+fieldset:valid {
+  border: 10px solid green;
+}
+input.foo {
+  color: green;
+}
+</style>
+<div>
+  <fieldset id="fieldset">
+    <div id="ancestor">
+      <input type="text" id="requiredInput" required>
+      <input type="text" id="other">
+    </div>
+  </fieldset>
+</div>
+<script>
+window.onload = function() {
+  other.classList.add('foo');
+  ancestor.remove();
+};
+</script>
--- a/layout/style/crashtests/1400936-2.html
+++ b/layout/style/crashtests/1400936-2.html
@ -0,0 +1,12 @@
+<script>
+document.addEventListener("DOMContentLoaded", function(){
+  document.getElementById('a').appendChild(document.createElement('rtc'));
+  let e = document.getElementById('b');
+  document.getElementById('c').appendChild(e.parentNode.removeChild(e));
+});
+</script>
+<body dir='auto'>
+<abbr id='b'>
+&#x79C;
+<meter id='c'>
+<keygen id='a'>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@ -225,3 +225,5 @@ load 1400926.html
 load 1401256.html
 load 1402419.html
 load 1401706.html
+load 1400936-1.html
+load 1400936-2.html