summaryrefslogtreecommitdiffstats
path: root/js/xpconnect/crashtests/751995.html
blob: fce9565ef20313735f76f00d72c13b60a3a3d504 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
<!DOCTYPE html>
<html class="reftest-wait">
<head>
<script>

function frameDoc() { return document.getElementById("f").contentDocument; }

function arm() {
  // Create an element in the iframe.
  var div = frameDoc().createElement("div");

  // Force a wrapper to be created for .style.
  var style = div.style;
  style.color = "green";

  // Adopt the element out of the iframe, leaving the |style| behind.
  document.adoptNode(div);
}

function boom()
{
  // Create an orphan.
  arm();

  // Force an iteration over all the wrappers in frameDoc's scope, causing
  // us to notice the orphan.
  frameDoc().write("2");

  // All done.
  document.documentElement.removeAttribute("class");
}

</script>
</head>
<body onload="boom();"><iframe id="f" src="data:text/html,1"></iframe></body>
</html>