diff options
Diffstat (limited to 'layout/generic/crashtests/472776-1.html')
| -rw-r--r-- | layout/generic/crashtests/472776-1.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/layout/generic/crashtests/472776-1.html b/layout/generic/crashtests/472776-1.html new file mode 100644 index 0000000000..be9a6a92d6 --- /dev/null +++ b/layout/generic/crashtests/472776-1.html @@ -0,0 +1,20 @@ +<!DOCTYPE html> +<html> +<head> +<script type="text/javascript"> + +function boom() +{ + var v = document.getElementById("v"); + v.childNodes[1].firstChild.data = ""; + document.documentElement.offsetHeight; + v.appendChild(document.createTextNode("D")); + v.firstChild.remove(); +} + +</script> +</head> +<body onload="boom();"> +<div id="v"><span>A</span><span>یC</span></div> +</body> +</html> |