summaryrefslogtreecommitdiffstats
path: root/layout/svg/crashtests/1443092.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/svg/crashtests/1443092.html34
1 files changed, 34 insertions, 0 deletions
diff --git a/layout/svg/crashtests/1443092.html b/layout/svg/crashtests/1443092.html
new file mode 100644
index 0000000000..7be4561e61
--- /dev/null
+++ b/layout/svg/crashtests/1443092.html
@@ -0,0 +1,34 @@
+<script>
+function start() {
+ o7=document.createElement('div');
+ o7.innerHTML='<style>@keyframes key7{ from{ transform: rotate(-536870911deg)}}\n*{ animation-name: key7; animation-duration: 0.001s';
+ o17=document.createElement('div');
+ o17.innerHTML='<svg><style>@font-face{}\n*{ outline-style: dotted</style><style>@font-face{ font-family: font3; src: url(';
+ o18=o17.firstChild.getElementsByTagName('*');
+ o20=o18[0];
+ o23=o18[1];
+ o114=document.createElement('iframe');
+ o114.src='1443092-helper.svg';
+ o114.addEventListener('load', fun0,false);
+ document.body.appendChild(o114);
+}
+function fun0() {
+ o117=o114.contentDocument;
+ document.replaceChild(o117.documentElement,document.documentElement);
+ o124=document.createElement('iframe');
+ document.documentElement.appendChild(o124);
+ o145=document.createElement('div');
+ o145.innerHTML='<svg><set attributeName="text-decoration">';
+ document.documentElement.appendChild(o20);
+ document.documentElement.appendChild(o23);
+ document.documentElement.appendChild(o7);
+ o124.src='x';
+ document.documentElement.appendChild(o145);
+ o264=document.createElement('style');
+ o265=document.createTextNode('*{ float: left');
+ o264.appendChild(o265);
+ o23.appendChild(o264);
+ setTimeout("location.reload()",40);
+}
+</script>
+<body onload="start()"></body>