bug 313173 - crash test by Martijn Wargers.

2009-04-24 10:08:09 -07:00 · 2009-04-24 10:08:09 -07:00 · be88316a2d
--- a/layout/xul/base/src/grid/crashtests/313173-1-inner.xul
+++ b/layout/xul/base/src/grid/crashtests/313173-1-inner.xul
@ -0,0 +1,41 @@
+<?xml version="1.0"?>
+
+<?xml-stylesheet href="chrome://global/skin/" type="text/css"?>
+
+<window title="Testcase bug - Crash with evil xul testcase, using -moz-grid/table-caption"
+        xmlns:html="http://www.w3.org/1999/xhtml"
+        xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<grid flex="1">
+  <columns>
+    <column flex="1"/>
+  </columns>
+
+  <rows>
+    <row>
+    </row>
+  </rows>
+</grid>
+
+<html:script>
+function doe(){
+document.getElementsByTagName('columns')[0].style.display='table-caption';
+setTimeout(doe2,20);
+}
+function doe2(){
+document.getElementsByTagName('columns')[0].style.display='-moz-grid';
+}     
+
+function clickit() {
+  var button = document.getElementById('button');
+  var evt = document.createEvent("MouseEvents");
+  evt.initMouseEvent("click", true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);
+  button.dispatchEvent(evt);
+setTimeout('clickit();', 20);
+}
+window.addEventListener('load', clickit, false);
+
+</html:script>
+        <html:button id="button" onclick="doe()" label="click">Clicking this should not crash Mozilla</html:button>
+</window>
+
--- a/layout/xul/base/src/grid/crashtests/313173-1.html
+++ b/layout/xul/base/src/grid/crashtests/313173-1.html
@ -0,0 +1,9 @@
+<html class="reftest-wait">
+<head>
+<script>
+setTimeout('document.documentElement.className = ""', 500);
+</script>
+<body>
+<iframe src="313173-1-inner.xul"></iframe>
+</body>
+</html>
--- a/layout/xul/base/src/grid/crashtests/crashtests.list
+++ b/layout/xul/base/src/grid/crashtests/crashtests.list
@ -3,6 +3,7 @@ load 306911-grid-testcases.xul
 load 306911-grid-testcases2.xul
 load 311710-1.xul
 load 312784-1.xul
+load 313173-1.html
 load 321066-1.xul
 load 321073-1.xul
 load 382750-1.xul