10 files changed, 119 insertions, 0 deletions
diff --git a/view/crashtests/281743-1.html b/view/crashtests/281743-1.html
new file mode 100644
index 0000000000..c381052c4f
--- /dev/null
+++ b/view/crashtests/281743-1.html
@@ -0,0 +1,16 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html>
+<head>
+<title>Testcase bug 281743</title>
+<style type="text/css">
+#header   { position: fixed; top: 0; left: 0; z-index: 100; }
+#mainmenu { position: fixed; top: 0; left: 0; z-index: 200; }
+</style>
+<script type="text/javascript">
+window.onload = function(e) {
+  var e = document.getElementsByTagName("style")[0];
+  e.disabled = true;
+  e.disabled = false;
+}
+</script>
+</head><body><div id="page"><div id="header"></div><div id="mainmenu"></div></div></body></html>
diff --git a/view/crashtests/323497-1.html b/view/crashtests/323497-1.html
new file mode 100644
index 0000000000..450069571e
--- /dev/null
+++ b/view/crashtests/323497-1.html
@@ -0,0 +1,17 @@
+<html><head><style>
+body {
+  display: inline;
+  opacity: 0.8;
+}
+</style>
+
+
+</head>
+
+<body>
+
+Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Nullam est nunc, eleifend et, auctor eget, bibendum vel, sapien. Curabitur orci justo, ullamcorper in, ultrices id, consectetuer eget, metus. Vestibulum ornare rutrum quam. Nullam nisl. In tincidunt, sapien vitae fringilla posuere, est ante ultricies dolor, ultricies molestie eros diam id nisi. Praesent consequat velit. Nullam interdum, dui nec laoreet venenatis, felis libero pharetra dolor, ut dictum pede lorem vel est. In hac habitasse platea dictumst. Phasellus mattis eros eu libero. Suspendisse nonummy. Nullam ultricies eros eget tortor scelerisque feugiat. Aliquam erat volutpat. Integer neque. Cras a eros sit amet purus semper accumsan. Cras adipiscing porta augue. Nunc feugiat, turpis eu vehicula ultrices, augue nisl hendrerit diam, in porttitor augue sapien sit amet tortor. Ut eu tortor quis mauris posuere cursus. Donec molestie orci vitae eros. Nulla augue augue, tincidunt quis, fermentum a, rhoncus et, lectus. 
+
+<select><option>a</option></select>
+
+</body></html>
+\ No newline at end of file
diff --git a/view/crashtests/382756-1.xhtml b/view/crashtests/382756-1.xhtml
new file mode 100644
index 0000000000..34960fbf69
--- /dev/null
+++ b/view/crashtests/382756-1.xhtml
@@ -0,0 +1,12 @@
+<?xml version="1.0"?>
+
+<?xml-stylesheet href="chrome://global/skin/global.css" type="text/css"?>
+
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<tree rows="6">
+  <treechildren style="-moz-appearance: checkbox;">
+  </treechildren>
+</tree>
+
+</window>
diff --git a/view/crashtests/38589-1.xhtml b/view/crashtests/38589-1.xhtml
new file mode 100644
index 0000000000..69bd472bb7
--- /dev/null
+++ b/view/crashtests/38589-1.xhtml
@@ -0,0 +1,10 @@
+<?xml version="1.0"?>
+<?xml-stylesheet href="chrome://global/skin/global.css" type="text/css"?>
+
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+		<scrollbox>
+			<stack>
+				<box style="margin-top: 50px; margin-left: 50px; opacity: 0.3;">p </box> 
+			</stack>
+		</scrollbox>
+</window>
diff --git a/view/crashtests/387745-1.svg b/view/crashtests/387745-1.svg
new file mode 100644
index 0000000000..a8236f4e36
--- /dev/null
+++ b/view/crashtests/387745-1.svg
@@ -0,0 +1,11 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+
+<g>
+  <foreignObject width="500" height="500">
+    <div xmlns="http://www.w3.org/1999/xhtml">
+      <select><option>A</option></select>
+    </div>
+  </foreignObject>
+</g>
+
+</svg>
diff --git a/view/crashtests/399852.html b/view/crashtests/399852.html
new file mode 100644
index 0000000000..aa31f7a8a8
--- /dev/null
+++ b/view/crashtests/399852.html
@@ -0,0 +1,17 @@
+<html>
+<head>
+<script>
+function doe2() {
+document.body.setAttribute('style', 'overflow:scroll; direction: rtl;');
+}
+setTimeout(doe2,500);
+</script>
+
+</head>
+<body>
+<span style="position: fixed;">          
+<iframe onload="window.frames[0].focus()"></iframe>
+</span>
+<li style=" position: fixed;" contenteditable="true"></li>
+</body>
+</html>
+\ No newline at end of file
diff --git a/view/crashtests/429315-1.html b/view/crashtests/429315-1.html
new file mode 100644
index 0000000000..6b03b34883
--- /dev/null
+++ b/view/crashtests/429315-1.html
@@ -0,0 +1,12 @@
+<HTML>
+<HEAD>
+</HEAD>
+<BODY>
+<SPAN>
+<SPAN style="POSITION: relative">
+<BR>
+<BR>
+<select>
+</select>
+</BODY>
+</HTML>
diff --git a/view/crashtests/507563-1.html b/view/crashtests/507563-1.html
new file mode 100644
index 0000000000..8476fb78db
--- /dev/null
+++ b/view/crashtests/507563-1.html
@@ -0,0 +1 @@
+<html style="transform:rotate(5deg);width:max-content"><div style="letter-spacing:-4.59pt;overflow:auto;white-space:pre;text-shadow:-125396in -1in blue;column-count:15;text-indent:4.64%;direction:rtl">
diff --git a/view/crashtests/64049-1.html b/view/crashtests/64049-1.html
new file mode 100644
index 0000000000..ef7f0da39a
--- /dev/null
+++ b/view/crashtests/64049-1.html
@@ -0,0 +1,14 @@
+<html>
+<head>
+ <title>Testcase</title>
+</head>
+
+
+<body >
+
+
+
+<iframe id="page" width=2000000 height=2000000 src="data:text/html,Q"></iframe>
+
+</body>
+</html>                                                                     
+\ No newline at end of file
diff --git a/view/crashtests/crashtests.list b/view/crashtests/crashtests.list
new file mode 100644
index 0000000000..aab94d6c7b
--- /dev/null
+++ b/view/crashtests/crashtests.list
@@ -0,0 +1,9 @@
+load chrome://reftest/content/crashtests/view/crashtests/38589-1.xhtml
+load 64049-1.html
+load 281743-1.html
+load 323497-1.html
+skip-if(Android) load chrome://reftest/content/crashtests/view/crashtests/382756-1.xhtml # No <tree> support on Android
+load 387745-1.svg
+load 399852.html
+load 429315-1.html
+load 507563-1.html