layout/svg/crashtests/1402486.html


1
2
3
4
5
6
7
8
9
10
11
12

<script>
function jsfuzzer() {
try { a.getEndPositionOfChar(0); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<svg>
<switch>
<text id="a">
</text>
<feTurbulence
<!-- a -->