diff options
Diffstat (limited to '')
| -rw-r--r-- | gfx/tests/crashtests/487724-1.html | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/gfx/tests/crashtests/487724-1.html b/gfx/tests/crashtests/487724-1.html new file mode 100644 index 0000000000..abc158b43e --- /dev/null +++ b/gfx/tests/crashtests/487724-1.html @@ -0,0 +1,23 @@ +<!DOCTYPE html> +<html> +<head> +<script type="text/javascript"> + +function boom() +{ + var w = document.getElementById("w"); + var q = document.getElementById("q"); + var e = document.createTextNode(""); + document.documentElement.appendChild(document.body); + w.appendChild(e); + document.documentElement.offsetHeight; + w.removeChild(q); + document.documentElement.offsetHeight; + e.data += " x "; +} + +</script> +</head> + +<body onload="boom();"><span id="w">s‮<span id="q"></span><div></div><span>a</span></span></body> +</html> |