Bug 589787 - crash test

2013-05-18 18:38:34 +00:00 · 2013-05-18 18:38:34 +00:00 · 6653c1b835
--- a/layout/base/crashtests/589787.html
+++ b/layout/base/crashtests/589787.html
@ -0,0 +1,27 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+function boom() {
+  document.documentElement.offsetHeight;
+  document.getElementById('e').setAttribute('style', '');
+  document.documentElement.offsetHeight;
+}
+</script>
+<style id="e">
+body #a::after { content: "before text"; position: fixed; }
+</style>
+</head>
+
+<body onload="boom();" style="-moz-column-count: 2; width: 100px;">
+<div>m</div>
+<div id="a" style="-moz-column-count: 2;">
+m
+<br style="float: left;">
+m
+<span style="float: left;">m</span>
+
+<div style="float: left; -moz-column-width: 9999999999px;"></div>
+</div>
+</body>
+</html>
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@ -347,6 +347,7 @@ load 576649-1.html
 load 579655.html
 load 580494-1.html
 load 580834-1.xhtml
+asserts(0-13) load 589787.html # bug 574889
 load 595039-1.html
 load 597924-1.html
 load 606432-1.html