Add crashtest for bug 540771

2010-06-28 14:58:58 -07:00 · 2010-06-28 14:58:58 -07:00 · ac10e35b64
--- a/layout/base/crashtests/540771-1.xhtml
+++ b/layout/base/crashtests/540771-1.xhtml
@ -0,0 +1,18 @@
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<xul:deck id="d"/>
+
+<xul:menuitem><span /><xul:menupopup id="p"/></xul:menuitem>
+
+<script>
+function boom()
+{
+  var p = document.getElementById("p");
+  var d = document.getElementById("d");
+  p.parentNode.removeChild(p);
+  d.appendChild(document.createElementNS("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul", "box"));
+}
+window.addEventListener("load", boom, false);
+</script>
+
+</html>
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@ -295,6 +295,7 @@ load 538082-1.xul
 load 538207-1.xhtml
 load 538210-1.html
 load 540760.xul
+load 540771-1.xhtml
 load 541869-1.xhtml
 load 541869-2.html
 load 560441-1.xhtml