Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: layout/base/crashtests/crashtests.list
<title>Testcase bug 343293 - Crash [@ nsLayoutUtils::GetFloatFromPlaceholder] using ::first-line, floats, caption and generated content</title>
<style>
*::first-line { }
*::before { content:"--"; }
</style>
<script>
function doe() {
document.getElementsByTagName('caption')[0].removeAttribute('style');
document.documentElement.offsetHeight;
document.getElementsByTagName('span')[0].removeAttribute('style');
}
window.onload=doe;
</script>
<caption style="float: left;"></caption>
<span style="float: right;"></span>
This should not crash Mozilla
</html>