Bug 1382357 - Crashtest. r=heycam

MozReview-Commit-ID: IUqzytg3SqL
2017-07-19 17:13:43 -07:00 · 2017-07-19 17:13:43 -07:00 · cdfdf83ff0
--- a/dom/xbl/crashtests/1382357.xhtml
+++ b/dom/xbl/crashtests/1382357.xhtml
@ -0,0 +1,36 @@
+<html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
+<head>
+
+<bindings xmlns="http://www.mozilla.org/xbl">
+  <binding id="foo"><content><span xmlns="http://www.w3.org/1999/xhtml"/></content></binding>
+</bindings>
+
+<script type="text/javascript">
+// <![CDATA[
+
+function boom()
+{
+  // Apply an invalid binding, and wait two ticks of the refresh driver for the async load.
+  var d = document.getElementById("d");
+  d.style.MozBinding = "url(#bar)";
+  requestAnimationFrame(function() {
+  requestAnimationFrame(function() {
+    // Trigger the InnerText getter.
+    document.getElementById("s").innerText;
+    document.documentElement.removeAttribute("class");
+  });
+  });
+}
+
+]]>
+</script>
+</head>
+
+<body onload="boom();">
+
+<div id="d">
+    <span id="s">SpanText</span>
+</div>
+
+</body>
+</html>
--- a/dom/xbl/crashtests/crashtests.list
+++ b/dom/xbl/crashtests/crashtests.list
@ -38,3 +38,4 @@ load 507991-1.xhtml
 load 830614-1.xul
 load 895805-1.xhtml
 load set-field-bad-this.xhtml
+load 1382357.xhtml