gecko-dev/layout/generic/crashtests/1032450.html

<html>
<head>
</head>

<body style="display: -moz-inline-grid;">
<div style="display: table;position: relative; float: left;">
<button style="display: table-column-group;">
 <iframe style="position: absolute;"></iframe>
</button>
</div>

</body></html>
Bug 1032450 - Flag the reflow state for a table frame as a "dummy" state if its parent state is. r=roc InitCBReflowState() copies the mCBReflowState from the parent reflow state for table frames, which is null for "dummy" states, so it would lead to a crash in InitConstraints() which assumes non-dummy states has a non-null mCBReflowState. 2014-07-04 11:48:15 +00:00			`<html>`
			`<head>`
			`</head>`

			`<body style="display: -moz-inline-grid;">`
			`<div style="display: table;position: relative; float: left;">`
			`<button style="display: table-column-group;">`
			`<iframe style="position: absolute;"></iframe>`
			`</button>`
			`</div>`

			`</body></html>`