layout/svg/crashtests/1402124.html


1
2
3
4
5
6
7
8
9
10

<script>
function jsfuzzer() {
try { a.getExtentOfChar(0); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<svg>
<switch>
<path/>
<text id="a">