File: 325218.xhtml

package info (click to toggle)
firefox 145.0.1-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,653,528 kB
  • sloc: cpp: 7,594,999; javascript: 6,459,658; ansic: 3,752,909; python: 1,403,455; xml: 629,809; asm: 438,679; java: 186,421; sh: 67,287; makefile: 19,169; objc: 13,086; perl: 12,982; yacc: 4,583; cs: 3,846; pascal: 3,448; lex: 1,720; ruby: 1,003; exp: 762; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10
file content (25 lines) | stat: -rw-r--r-- 902 bytes parent folder | download | duplicates (30) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
        xmlns:html="http://www.w3.org/1999/xhtml"
        class="reftest-wait"
        title="Testcase bug 325218 - Crash with evil xul testcase, using box, tooltip, object, etc">
<html:span>
  <box>
    <tooltip/>
  </box>

  <html:td/><html:object style="display: none;">This should not crash Mozilla
      <html:span style="display: table;"/>
  </html:object>
</html:span>

<html:script>
function doe(){
  document.getElementsByTagName('html:object')[0].removeAttribute('style');
  document.getElementsByTagName('html:object')[0].offsetHeight;
  document.getElementsByTagName('html:span')[1].removeAttribute('style');
  document.getElementsByTagName('html:object')[0].setAttribute('style', 'text-decoration: underline');
  document.documentElement.removeAttribute("class");
}
setTimeout(doe,50);
</html:script>
</window>