mozilla-inbound: changeset 83360:ae7fa68bf1c1dff90ab2a32d752d5b0012acc519

author	Jesse Ruderman <jruderman@gmail.com>
	Mon, 26 Dec 2011 14:29:25 +0100
changeset 83360	ae7fa68bf1c1dff90ab2a32d752d5b0012acc519
parent 83359	902a4ec5c870d684caeb8fb95ffab097195a44ef
child 83361	4e7281c6c2e91816257d0765797b43b1287bf922
push id	4365
push user	mpalmgren@mozilla.com
push date	Mon, 26 Dec 2011 13:30:34 +0000
treeherder	mozilla-inbound@4e7281c6c2e9 [default view] [failures only]
perfherder	[talos] [build metrics] [platform microbench] (compared to previous push)
bugs	713417
milestone	12.0a1
first release with	nightly linux32 6f4f2e53694b / 12.0a1 / 20111227031015 / files nightly linux64 6f4f2e53694b / 12.0a1 / 20111227031015 / files nightly mac 6f4f2e53694b / 12.0a1 / 20111227031015 / files nightly win32 6f4f2e53694b / 12.0a1 / 20111227031015 / files nightly win64 6f4f2e53694b / 12.0a1 / 20111227031015 / files
last release without	nightly linux32 9f29daaecbcc / 12.0a1 / 20111226031002 / files nightly linux64 9f29daaecbcc / 12.0a1 / 20111226031002 / files nightly mac 9f29daaecbcc / 12.0a1 / 20111226031002 / files nightly win32 9f29daaecbcc / 12.0a1 / 20111226031002 / files nightly win64 9f29daaecbcc / 12.0a1 / 20111226031002 / files

new file mode 100644
--- /dev/null
+++ b/content/base/crashtests/713417.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+  var f = document.getElementById("f");
+  var w = f.contentWindow;
+  var d = w.document;
+  d.designMode = 'on';
+  var r = d.documentElement;
+  d.removeChild(r);
+  document.adoptNode(r);
+  f.parentNode.removeChild(f);
+}
+
+</script>
+</head>
+<body onload="boom();">
+<iframe src="data:text/html,1" id="f"></iframe>
+</body>
+</html>