summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/369150-2.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/generic/crashtests/369150-2.html22
1 files changed, 22 insertions, 0 deletions
diff --git a/layout/generic/crashtests/369150-2.html b/layout/generic/crashtests/369150-2.html
new file mode 100644
index 0000000000..59215b14a6
--- /dev/null
+++ b/layout/generic/crashtests/369150-2.html
@@ -0,0 +1,22 @@
+<html class="reftest-wait">
+<head>
+<title>Bug 369150 - Crash [@ nsHTMLFramesetFrame::GetNoResize] with dynamic changes</title>
+<script>
+
+function boom()
+{
+ document.getElementById("frameset").appendChild(document.createElement("frame"));
+ document.getElementById("frameset").setAttribute("rows", "100%, *");
+ document.documentElement.removeAttribute("class");
+}
+
+</script>
+
+</head>
+
+ <frameset id="frameset" cols="130, *" onload="setTimeout(boom, 30);">
+ <frame src="data:text/html,foo">
+ <frame src="data:text/html,bar">
+ </frameset>
+
+</html>