summaryrefslogtreecommitdiffstats
path: root/dom/xhr/tests/crashtests/1546185.html
blob: 98eb673592e20566c93212368d8411b945618b3b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<script>

function boom() {
  a = new AudioContext();
  b = new XMLHttpRequest({});
  c = new ArrayBuffer(34464);
  d = new XMLHttpRequest();
  try {
    d.open('G', '', false);
  } catch (e) {}
  try {
    x = new ArrayBuffer(1);
    a.decodeAudioData(x, function() {}, function() {
      try {
        b.open('G', '', false);
      } catch (e) {}
      try {
        b.send();
      } catch (e) {}
      try {
        d.open('P', '', false);
      } catch (e) {}
      try {
        d.send();
      } catch (e) {}
    })
  } catch (e) {}
  try {
    d.send();
  } catch (e) {}
}

boom();

</script>
</head>
<body></body>
</html>