dom/base/crashtests/1406109-1.html


1
2
3
4
5
6
7
8
9
10

<html>
<head>
<script>
function jsfuzzer() {
  try { a.matches("1"); } catch(e) { }
  try { document.createElement("p").closest("1"); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<feBlend id="a" />