Index: LayoutTests/fast/dom/parser-adjust-parent-crash.html |
diff --git a/LayoutTests/fast/dom/parser-adjust-parent-crash.html b/LayoutTests/fast/dom/parser-adjust-parent-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..c6399cec775adc9ac1164390560e4f9dfa47b98e |
--- /dev/null |
+++ b/LayoutTests/fast/dom/parser-adjust-parent-crash.html |
@@ -0,0 +1,20 @@ |
+<script type="foo" id="torun"> |
+document.getElementById("torun").appendChild(p); |
+</script> |
+ |
+<b> |
+<p> |
+<script> |
+ if (window.testRunner) |
+ window.testRunner.dumpAsText(); |
+ p = document.querySelector("p"); |
+ s = document.getElementById("torun"); |
+ s.appendChild(p); |
+ s.type = ""; |
+</script> |
+</b> |
+</p> |
+ |
+<script> |
+ document.body.innerHTML = "PASS unless crash."; |
+</script> |