diff options
Diffstat (limited to 'layout/generic/crashtests/876155.html')
| -rw-r--r-- | layout/generic/crashtests/876155.html | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/layout/generic/crashtests/876155.html b/layout/generic/crashtests/876155.html new file mode 100644 index 000000000..abaaa0e99 --- /dev/null +++ b/layout/generic/crashtests/876155.html @@ -0,0 +1,15 @@ +>><test id=test1>><cr id=test2>>><foo2 id=test3>>>><bdi id=test4>x qJ9_:}6nzX& +>>>>><script> +function forceGC() {SpecialPowers.forceGC(); } +var docElement = document.documentElement; +document.addEventListener("DOMContentLoaded", CFcrash, false); +function CFcrash() { +try { test5 = document.createTextNode("/}F9*D f e /e=*: M[3 b-m#iA& Kj[ ZA- RSOh$-@ *xTk8r_ X:du[Ok 4d;bf|xtS x]sA&"); } catch(e) {} +setTimeout('document.execCommand("SelectAll");document.execCommand("InsertText", false, "hello");', 200); +setTimeout('test3.parentNode.removeChild(test3); forceGC();', 100); +try { document.adoptNode(test4); } catch(e) {} +try { test4.appendChild(test5); } catch(e) {} +try { test4.setAttribute("dir", "&locale.dir;"); } catch(e) {} +try { test1.appendChild(test4); } catch(e) {} +try { test4.replaceChild(test2, test4.firstChild); } catch(e) { } +}</script>> |