diff options
Diffstat (limited to '')
| -rw-r--r-- | layout/generic/crashtests/1405896.html | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/layout/generic/crashtests/1405896.html b/layout/generic/crashtests/1405896.html new file mode 100644 index 0000000000..0d3b6ddb24 --- /dev/null +++ b/layout/generic/crashtests/1405896.html @@ -0,0 +1,31 @@ +<!-- a --> +<style> +* { + height: 0vmin; + display: grid +} +.class1 { + columns: 0px; + page-break-before: always; + grid-row-start: last +} +</style> +<script> +function jsfuzzer() { + try { htmlvar00045.replaceChild(htmlvar00013,htmlvar00045.childNodes[6]); } catch(e) { } +} +</script> +<body onload=jsfuzzer()> +<details id="htmlvar00013" class="class1"></details> +<details class="class1" open=""> +<form> +<h6 id="htmlvar00045"> +> +<link> +<content> +<embed> +> +# +K +</content> +<!-- a --> |