summaryrefslogtreecommitdiffstats
path: root/js/xpconnect/crashtests/753162.html
diff options
context:
space:
mode:
Diffstat (limited to 'js/xpconnect/crashtests/753162.html')
-rw-r--r--js/xpconnect/crashtests/753162.html23
1 files changed, 23 insertions, 0 deletions
diff --git a/js/xpconnect/crashtests/753162.html b/js/xpconnect/crashtests/753162.html
new file mode 100644
index 000000000..7e53a29e5
--- /dev/null
+++ b/js/xpconnect/crashtests/753162.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+ var frameDoc = document.getElementById("f").contentDocument;
+ frameDoc.write("2");
+ var f = function(event) {
+ frameDoc.removeEventListener("DOMAttrModified", f, false);
+ Math.sin(2.10);
+ frameDoc.write("4");
+ };
+ frameDoc.addEventListener("DOMAttrModified", f, false);
+ frameDoc.write("<html d>");
+}
+
+</script>
+</head>
+
+<body onload="boom();"><iframe id="f" src="data:text/html,1"></iframe></body>
+</html>