Bug 416107 - crashtest.

2014-11-02 22:47:01 +00:00 · 2014-11-02 22:47:01 +00:00 · b883af5afb
--- a/layout/base/crashtests/416107.xhtml
+++ b/layout/base/crashtests/416107.xhtml
@ -0,0 +1,26 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+  var z = document.getElementById("z");
+  var c =  document.getElementById("c");
+  
+  z.removeChild(z.firstChild);
+  document.body.offsetHeight;
+  c.style.counterReset = "c";
+}
+
+</script>
+
+</head>
+
+<body onload="boom();" style="font-family: monospace; width: 7ch;">
+
+<span style="margin: 8px;"></span>
+
+<span style="position: relative;" id="z">OOO<span style="display: table-caption;">OOOOOO</span><span id="c" style="position: absolute;"></span></span>
+
+</body>
+</html>
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@ -230,6 +230,7 @@ load 413587-1.svg
 load 414058-1.html
 load 414175-1.xul
 load 415503.xhtml
+load 416107.xhtml
 load 420031-1.html
 load 420213-1.html
 load 420219-1.html