summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/736924-1.html
blob: b9274bd78cb798e1ce9c74a7758a88d107a96f97 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
<!DOCTYPE html>
<html>
<script>
function boom()
{
  var a = document.createElementNS("http://www.w3.org/1999/xhtml", "span");
  var b = document.createElementNS("http://www.w3.org/1999/xhtml", "span");
  var x = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
  var y = document.createElementNS("http://www.w3.org/1999/xhtml", "basefont");
  var z = document.createElementNS("http://www.w3.org/1999/xhtml", "body");
  z.setAttributeNS(null, "link", "#333333");

  document.documentElement.appendChild(a);
  b.appendChild(x);
  b.appendChild(y);
  document.documentElement.offsetHeight;
  a.appendChild(b);
  document.documentElement.offsetHeight;
  document.createElementNS("http://www.w3.org/1999/xhtml", "div").appendChild(y);
  b.appendChild(z);
}
</script>
<body onload="boom();"></body>