1 files changed, 50 insertions, 0 deletions
diff --git a/layout/reftests/forms/textarea/setvalue-framereconstruction-1.html b/layout/reftests/forms/textarea/setvalue-framereconstruction-1.html
new file mode 100644
index 000000000..dd8f1d2c0
--- /dev/null
+++ b/layout/reftests/forms/textarea/setvalue-framereconstruction-1.html
@@ -0,0 +1,50 @@
+<!--
+
+This test is mostly a copy of layout/forms/crashtests/373586-1.xhtml,
+and it makes sure that the value setter works correctly when setting
+the value causes the frame to be reconstructed.
+
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
+<head>
+
+<bindings xmlns="http://www.mozilla.org/xbl">
+  <binding id="foo">
+    <content>
+      <children xmlns="http://www.mozilla.org/xbl" />
+    </content>
+  </binding>
+</bindings>
+
+<script>
+function boom()
+{
+  document.getElementById("div").style.MozBinding = "url('#foo')";
+
+  var opt1 = document.getElementById("opt1");
+  opt1.removeChild(opt1.firstChild);
+
+  document.getElementById("textarea").value += " y";
+
+  document.getElementById("div").style.MozBinding = "";
+  document.documentElement.removeAttribute("class")
+}
+
+window.addEventListener("MozReftestInvalidate", boom, false);
+</script>
+
+</head>
+
+<body>
+
+<div id="div">
+  <textarea rows="3" cols="5" id="textarea">x</textarea>
+</div>
+
+<select style="-moz-appearance:none">
+  <option id="opt1">opt1</option>
+</select>
+
+</body>
+</html>
+