layout/mathml/crashtests/367107-1.html
author Andrea Marchesini <amarchesini@mozilla.com>
Tue, 24 Oct 2017 14:38:23 +0200
changeset 387852 17c1e024efc2ac9dd1638c568d70c91548e986dc
parent 9918 06f493b7544c80fc0a00f4375f441f64bec5bab6
permissions -rw-r--r--
Bug 1409329 - NS_NewBufferedOutputStream should take the ownership of the outputStream, r=smaug

<html>
<head>
<script>

function boom()
{
  var MATHML_NS = "http://www.w3.org/1998/Math/MathML";

  var mtr = document.createElementNS(MATHML_NS, 'mtr');
  var mtable = document.createElementNS(MATHML_NS, 'mtable');

  document.body.appendChild(mtr);
  mtr.appendChild(mtable);
}

</script>
</head>

<body onload="boom()">

</body>
</html>