layout/svg/crashtests/1402109.html


1
2
3
4
5
6
7
8
9
10
11

<script>
function jsfuzzer() {
try { svgvar00012.getStartPositionOfChar(0); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<table>
<caption>,HM&gt;v((Ndeoi=&amp;</caption>
<caption>
<svg>
<text id="svgvar00012">