Bug 626014 - crashtest. a=test

2011-01-18 18:47:02 +01:00 · 2011-01-18 18:47:02 +01:00 · 6767ab7c54
--- a/layout/forms/crashtests/626014.xhtml
+++ b/layout/forms/crashtests/626014.xhtml
@ -0,0 +1,20 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<script>
+<![CDATA[
+
+function boom()
+{
+  document.getElementById("i").selectionEnd;
+  document.getElementById("a").appendChild(document.getElementById("b"));
+}
+
+]]>
+</script>
+</head>
+<body onload="boom();">
+
+<mrow xmlns="http://www.w3.org/1998/Math/MathML" id="a"><mrow id="b"/><input xmlns="http://www.w3.org/1999/xhtml" id="i" /></mrow>
+
+</body>
+</html>
--- a/layout/forms/crashtests/crashtests.list
+++ b/layout/forms/crashtests/crashtests.list
@ -44,3 +44,4 @@ load 570624-1.html
 load 498698-1.html
 asserts(1) load 578604-1.html # bug 584564
 asserts(5) load 590302-1.xhtml # bug 584564
+load 626014.xhtml