dom/base/test/file_bug557892.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

<html><head>
<title>Crash [@ nsGenericElement::SetAttr] with classList.toggle</title>
<script>
var classList;
var interval;
function run() {
  classList = window.frames[0].document.documentElement.classList;
  window.frames[0].location.reload();
  interval = setInterval(function(aClassList) {aClassList.toggle('a'); forcegc();}, 10, classList);
  // Let the interval run for awhile and close the window after 2 seconds.
  setTimeout(function() { clearInterval(interval); window.opener.done(); window.close(); }, 2000);
}

function forcegc(){
  SpecialPowers.forceGC();
  SpecialPowers.gc();
}

    </script>
  </head>
  <body onload="run()">
    <iframe></iframe>
  </body>
</html>