File: 322678.html

package info (click to toggle)
firefox 145.0.1-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,653,528 kB
  • sloc: cpp: 7,594,999; javascript: 6,459,658; ansic: 3,752,909; python: 1,403,455; xml: 629,809; asm: 438,679; java: 186,421; sh: 67,287; makefile: 19,169; objc: 13,086; perl: 12,982; yacc: 4,583; cs: 3,846; pascal: 3,448; lex: 1,720; ruby: 1,003; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (27 lines) | stat: -rw-r--r-- 841 bytes parent folder | download | duplicates (31) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
 
<!-- Quirks mode on purpose -->
<html>
  <head>
    <title>Testcase bug 322678 - Crash [@ nsIFrame::GetParent] with evil testcase position:relative/absolute/display:table-column, etc</title>
    <script>
    function run(){
      document.body.offsetHeight;
      document.getElementById('one').removeAttribute('style');
      document.body.offsetHeight;
      document.getElementById('two').removeAttribute('style');
      document.body.offsetHeight;
    }
    </script>
  </head>
  <body onload="run();">
    <span>
      <div style="position: relative;">
        <span style="position: absolute;"></span>
      </div>

      <span id="one" style="display: table-column;">
        <span id="two" style="display: block; position: relative;">
        </span>
      </span><u style="display: table-cell;">  </u>
    </span>
  </body>
</html>