Bug 713417 - Crash test.
authorJesse Ruderman <jruderman@gmail.com>
Mon, 26 Dec 2011 14:29:25 +0100
changeset 84585 ae7fa68bf1c1dff90ab2a32d752d5b0012acc519
parent 84584 902a4ec5c870d684caeb8fb95ffab097195a44ef
child 84586 4e7281c6c2e91816257d0765797b43b1287bf922
push id805
push userakeybl@mozilla.com
push dateWed, 01 Feb 2012 18:17:35 +0000
treeherdermozilla-aurora@6fb3bf232436 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs713417
milestone12.0a1
Bug 713417 - Crash test.
content/base/crashtests/713417.html
new file mode 100644
--- /dev/null
+++ b/content/base/crashtests/713417.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+  var f = document.getElementById("f");
+  var w = f.contentWindow;
+  var d = w.document;
+  d.designMode = 'on';
+  var r = d.documentElement;
+  d.removeChild(r);
+  document.adoptNode(r);
+  f.parentNode.removeChild(f);
+}
+
+</script>
+</head>
+<body onload="boom();">
+<iframe src="data:text/html,1" id="f"></iframe>
+</body>
+</html>