dom/svg/crashtests/385096.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14

<html>
<head>
<script>
function boom()
{
  var SVG_NS = "http://www.w3.org/2000/svg";
  var feFuncG = document.createElementNS(SVG_NS, "feFuncG");
  feFuncG.offset.baseVal = 1;
}
</script>
</head>
<body onload="boom();">
</body>
</html>