summaryrefslogtreecommitdiffstats
path: root/layout/style/crashtests/1404180-1.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/style/crashtests/1404180-1.html22
1 files changed, 22 insertions, 0 deletions
diff --git a/layout/style/crashtests/1404180-1.html b/layout/style/crashtests/1404180-1.html
new file mode 100644
index 0000000000..079d6800f5
--- /dev/null
+++ b/layout/style/crashtests/1404180-1.html
@@ -0,0 +1,22 @@
+<script>
+function jsfuzzer() {
+ try { htmlvar00016.appendChild(htmlvar00017); } catch(e) { }
+ try { htmlvar00016.form.setAttribute("novalidate", "novalidate"); } catch(e) { }
+ try { htmlvar00017.appendChild(htmlvar00036); } catch(e) { }
+ try { svgvar00007.appendChild(htmlvar00008); } catch(e) { }
+}
+</script>
+<body onload=jsfuzzer()>
+<form id="htmlvar00007">
+<legend id="htmlvar00008">
+<output id="htmlvar00016"></output>
+</legend>
+<link id="htmlvar00017"></link>
+<svg>
+<path id="svgvar00006">
+<animateTransform id="svgvar00007"/>
+</path>
+<use xlink:href="#svgvar00006">
+<table id="htmlvar00036">
+<th>
+<output form="htmlvar00007">