summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/772306.html
blob: 01ac5ba8d0a88ba37ca9294d83439daacf54aef0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
    var allNodes = [];
    allNodes[5] = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
    allNodes[5].style.setProperty("-moz-column-width", "200px", "");
    allNodes[5].style.setProperty("height", "2em", "");
    allNodes[7] = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
    allNodes[7].style.setProperty("float", "left", "");
    allNodes[30] = document.createElementNS("http://www.w3.org/1998/Math/MathML", "munder");
    (allNodes[7] || allNodes[5] || document.body).appendChild(allNodes[30]);
    (allNodes[5] || document.body).appendChild(allNodes[7]);
    allNodes[17] = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
    allNodes[17].style.setProperty("display", "inline-block", "");
    (allNodes[5] || document.body).appendChild(allNodes[17]);
    allNodes[20] = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
    (allNodes[5] || document.body).appendChild(allNodes[20]);
    allNodes[23] = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
    allNodes[23].style.setProperty("float", "left", "");
    allNodes[25] = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
    allNodes[25].style.setProperty("display", "inline-block", "");
    (allNodes[23] || allNodes[5] || document.body).appendChild(allNodes[25]);
    (allNodes[5] || document.body).appendChild(allNodes[23]);
    (document.body).appendChild(allNodes[5]);
    document.documentElement.offsetHeight;
    allNodes[34] = document.createElementNS("http://www.w3.org/1998/Math/MathML", 'maligngroup');
    allNodes[17].appendChild(allNodes[34]);
    document.documentElement.offsetHeight;
    allNodes[30].setAttribute('accentunder', "false");
}

</script>
</head>

<body onload="boom();"></body>
</html>