321107 - (ajax-demolisher) Ajax demolisher for crashing Mozilla

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Martijn Wargers (dead)]

You need to use this tool locally to get it to work.
You need to make a 'mozdata.htm' file in C://
Then execute filewrite.xul
Every 6s or so it refreshes the bottom frame with a new mangled html file. 
When Mozilla crashes, you are left with a html file that crashes (well, most of the time).
At the end of that 'mozdata.htm' file, I add this text (sort of), to trigger the crash:
</textarea></iframe></object></script>
<script>
function addstyles(){
var x=document.createElement('style');
x.innerHTML='\
*:first-child::first-line { text-transform: uppercase;
background-color:green; font-size:110%;}\
*:first-child::after { content:"anonymous text";
float:right;border:3px solid black;text-transform: uppercase;}\
*:first-child::before { content:"before text"; float:right;border:3px
solid black;font-size: 10px;}\
';
document.documentElement.appendChild(x);
}

function removestyles(i){


var x=document.getElementsByTagName('*');

if (x[i])
 {
x[i].removeAttribute('style');
}

 i++;
setTimeout(removestyles,50,i);
}
setTimeout(addstyles,200);
setTimeout(removestyles,500,0);
</script>

I filed it as security-sensitive, if it's not security-sensitive, then please
make the bug public.

Comment 1

[Martijn Wargers (dead)]

Bugs not fixed yet, that were discovered with this tool:
Bug 315850, bug 315918, bug 316026, bug 317179, bug 317275, bug 317302, bug 317724, bug 317854, bug 317876, bug 318592.

Comment 2

[Martijn Wargers (dead)]

Attachment: manglehtmlv2

Improvements:
1 single html file, no need to create mozdata.html manually anymore, not dependent on textarea.value anymore.

Comment 3

[Martijn Wargers (dead)]

Attachment: v3

Some more improvements, now you can create html, xul, svg files.

Comment 4

[Martijn Wargers (dead)]

Attachment: v4

Some more options (midas ability, adding random xbl, with/without extra text, templates).
The code is becoming real messy, now.
I also have an official name for this thing: Ajax crusher (I really wanted to have something with Ajax in it).

Comment 5

[Martijn Wargers (dead)]

Er, I meant: Ajax demolisher!
Turning off/on elements/style rules still needs to happen manually in the crasher.htm file.

Comment 6

[Martijn Wargers (dead)]

Attachment: v5

Version 5.
Now also able to change various other styles and some other stuff fixed.

Comment 7

[Martijn Wargers (dead)]

Attachment: v6

- templates: you can relative easy add custom scripts (in the templates/ directory) which can do any stuff (changing styles, stirdom, etc) on the document
- Added a bunch of other styles
- I removed the size check for xml docs, so look out for that, if you use this.
- Added a test button, to test only
- Added some foreignobject stuff for trunk, to be able to rotate, zoom and so.

Comment 8

[Martijn Wargers (dead)]

Attachment: v7

With more templates (including ispiked's print preview one), also with all kinds of (unminimised and minimised) crashers that are now wfm.
To use this, open ajaxdemolisher.htm.
To test the worksformecrashes, just push the 'just test' button.

Comment 9

[Martijn Wargers (dead)]

Attachment: v7

v7 without the worksorme crashers, but with the crashers that still crash nowadays on trunk.

Comment 10

[Martijn Wargers (dead)]

(In reply to comment #8)
> To test the worksformecrashes, just push the 'just test' button.

Er, I meant the 'wfm_test.htm' button.

Comment 11

[Martijn Wargers (dead)]

Attachment: v8

version 8, not sure, what changed compared to version 7.
I believe now the ability to add print preview was added.