Bug 1156588 - Add crashtest.

--HG-- extra : rebase_source : 423290ff8078e83afaea6c8bc182bd3cdb954e00
2015-10-25 16:20:16 -04:00 · 2015-10-25 16:20:16 -04:00 · bbb8d0acb0
--- a/layout/base/crashtests/1156588.html
+++ b/layout/base/crashtests/1156588.html
@ -0,0 +1,29 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="UTF-8">
+<!--
+user_pref("layout.css.grid.enabled", true);
+-->
+<script>
+
+function boom()
+{
+    document.documentElement.offsetHeight;
+    document.getElementById("x").style.content = "'x'";
+    document.documentElement.offsetHeight;
+    document.getElementById("s").remove();
+    document.documentElement.offsetHeight;
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<div style="display: inline-grid; white-space: pre;"><div id="x"><span>
+<span>
+</span><span id="s"></span></span></div></div>
+
+</body>
+</html>
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@ -463,3 +463,4 @@ load 1116104.html
 load 1107508-1.html
 load 1127198-1.html
 load 1140198.html
+pref(layout.css.grid.enabled,true) load 1156588.html