Crashtest for bug 456196, by Martijn Wargers <martijn.martijn@gmail.com>.

2008-10-17 10:13:34 +02:00 · 2008-10-17 10:13:34 +02:00 · 6c00be346d
--- a/layout/style/crashtests/456196.html
+++ b/layout/style/crashtests/456196.html
@ -0,0 +1,16 @@
+<html>
+<head>
+<title>Crash [@ nsCSSValueList::~nsCSSValueList] with adding a lot of values in css property</title>
+</head>
+<body>
+<div style="border: 1px solid black; width: 100px; height: 100px;"></div>
+<script>
+function forceFree() {
+  var str = ' rotate(1deg)';
+  for(var i=0;i<17;i++) {str += str;}
+ document.getElementsByTagName('div')[0].style.MozTransform = str;  
+}
+setTimeout(forceFree,100);
+</script>
+</body>
+</html>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@ -20,3 +20,4 @@ load 447776-1.html
 load 447783-1.html
 load 448161-1.html
 load 448161-2.html
+load 456196.html