summaryrefslogtreecommitdiff
path: root/dom/mathml/crashtests
diff options
context:
space:
mode:
authorMatt A. Tobin <mattatobin@localhost.localdomain>2018-02-02 04:16:08 -0500
committerMatt A. Tobin <mattatobin@localhost.localdomain>2018-02-02 04:16:08 -0500
commitad18d877ddd2a44d98fa12ccd3dbbcf4d0ac4299 (patch)
tree10027f336435511475e392454359edea8e25895d /dom/mathml/crashtests
parent15477ed9af4859dacb069040b5d4de600803d3bc (diff)
downloaduxp-ad18d877ddd2a44d98fa12ccd3dbbcf4d0ac4299.tar.gz
Add m-esr52 at 52.6.0
Diffstat (limited to 'dom/mathml/crashtests')
-rw-r--r--dom/mathml/crashtests/462929-1.html12
-rw-r--r--dom/mathml/crashtests/770710-1.html25
-rw-r--r--dom/mathml/crashtests/crashtests.list2
3 files changed, 39 insertions, 0 deletions
diff --git a/dom/mathml/crashtests/462929-1.html b/dom/mathml/crashtests/462929-1.html
new file mode 100644
index 0000000000..386d8e138f
--- /dev/null
+++ b/dom/mathml/crashtests/462929-1.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script type="text/javascript">
+
+var a = document.createElementNS("http://www.w3.org/2000/svg", "foo");
+var b = document.createElementNS("http://www.w3.org/1998/Math/MathML", "math");
+
+</script>
+</head>
+<body></body>
+</html>
diff --git a/dom/mathml/crashtests/770710-1.html b/dom/mathml/crashtests/770710-1.html
new file mode 100644
index 0000000000..2171966769
--- /dev/null
+++ b/dom/mathml/crashtests/770710-1.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+ var mo = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mo");
+ var text = document.createTextNode(" ");
+ mo.appendChild(text);
+ document.body.appendChild(mo);
+
+ window.getSelection().removeAllRanges();
+ var r = document.createRange();
+ r.setStart(mo.firstChild, 0);
+ r.setEnd(mo.firstChild, 1);
+ window.getSelection().addRange(r);
+
+ window.getSelection().toString();
+}
+
+</script>
+</head>
+<body onload="boom();"></body>
+</html>
diff --git a/dom/mathml/crashtests/crashtests.list b/dom/mathml/crashtests/crashtests.list
new file mode 100644
index 0000000000..6ebf3c8eb1
--- /dev/null
+++ b/dom/mathml/crashtests/crashtests.list
@@ -0,0 +1,2 @@
+load 462929-1.html
+load 770710-1.html