Backed out changeset 0564666f34b2 (bug 1507674) for crashtests in reftest/tests/dom/base/crashtests/1397795.html CLOSED TREE

--HG--
extra : amend_source : 0827eb3d6a4ed61ef99b71ad25d9b9170d23d63e

layout/base/RestyleManager.cpp

@@ -1738,7 +1738,6 @@ void RestyleManager::ProcessRestyledFrames(nsStyleChangeList& aChangeList) {
   }
 
   aChangeList.Clear();
-  FlushOverflowChangedTracker();
 }
 
 /* static */ uint64_t RestyleManager::GetAnimationGenerationForFrame(
@@ -3006,6 +3005,8 @@ void RestyleManager::DoProcessPendingRestyles(ServoTraversalFlags aFlags) {
 
   doc->ClearServoRestyleRoot();
 
+  FlushOverflowChangedTracker();
+
   ClearSnapshots();
   styleSet->AssertTreeIsClean();
   mHaveNonAnimationRestyles = false;

layout/style/crashtests/1507674.html

@@ -1,16 +0,0 @@
-<style>
-menuitem { -webkit-filter: url(#a) }
-</style>
-<menuitem>A
-</menu>
-<svg id="b" style="-webkit-text-stroke-width: 1px;">
-<text id="a">
-<menu style="background-image: url();">
-<menuitem id="c">
-<script>
-c.offsetTop;
-a.setAttribute("exponent", "1");
-c.offsetTop;
-b.setAttribute("text-decoration", "line-through");
-c.offsetTop;
-</script>

layout/style/crashtests/crashtests.list

@@ -295,6 +295,5 @@ load 1479681.html
 load 1488817.html
 load 1490012.html
 load 1502893.html
-load 1507674.html
 load 1509989.html
 load 1514086.html