diff options
Diffstat (limited to 'dom/svg/crashtests/761507-1.svg')
| -rw-r--r-- | dom/svg/crashtests/761507-1.svg | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/dom/svg/crashtests/761507-1.svg b/dom/svg/crashtests/761507-1.svg new file mode 100644 index 0000000000..172d71ed95 --- /dev/null +++ b/dom/svg/crashtests/761507-1.svg @@ -0,0 +1,18 @@ +<svg xmlns="http://www.w3.org/2000/svg"> +<script> +<![CDATA[ + +function boom() +{ + var r = document.createElementNS("http://www.w3.org/2000/svg", "rect"); + var f = r.requiredFeatures; + f.appendItem(1); + document.implementation.createDocument('', '', null).adoptNode(r); + r.getAttribute("requiredFeatures"); +} + +window.addEventListener("load", boom, false); + +]]> +</script> +</svg> |
