diff options
Diffstat (limited to 'layout/base/crashtests/1409147.html')
| -rw-r--r-- | layout/base/crashtests/1409147.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/layout/base/crashtests/1409147.html b/layout/base/crashtests/1409147.html new file mode 100644 index 0000000000..dcdbe9d907 --- /dev/null +++ b/layout/base/crashtests/1409147.html @@ -0,0 +1,20 @@ +<style>
+#htmlvar00008 { background-blend-mode: screen, normal; }
+#htmlvar00009 { mix-blend-mode: darken; }
+.class1 {
+ outline: auto;
+ will-change: z-index;
+ background-image: url(data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7);
+}
+</style>
+<script>
+function jsfuzzer() {
+ try { htmlvar00010.after(htmlvar00005); } catch(e) { }
+}
+</script>
+<body onload=jsfuzzer()>
+<p id="htmlvar00005"></p>
+<font id="htmlvar00008"
+class="class1">
+<button id="htmlvar00009"></button>
+<canvas id="htmlvar00010">
|