diff options
Diffstat (limited to 'layout/generic/crashtests/472776-1.html')
| -rw-r--r-- | layout/generic/crashtests/472776-1.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/layout/generic/crashtests/472776-1.html b/layout/generic/crashtests/472776-1.html new file mode 100644 index 000000000..745dcc167 --- /dev/null +++ b/layout/generic/crashtests/472776-1.html @@ -0,0 +1,20 @@ +<!DOCTYPE html> +<html> +<head> +<script type="text/javascript"> + +function boom() +{ + var v = document.getElementById("v"); + v.childNodes[1].firstChild.data = ""; + document.documentElement.offsetHeight; + v.appendChild(document.createTextNode("D")); + v.removeChild(v.firstChild); +} + +</script> +</head> +<body onload="boom();"> +<div id="v"><span>A</span><span>یC</span></div> +</body> +</html> |