Index: LayoutTests/fast/dom/move-style-element-to-inactive-document-crash.html |
diff --git a/LayoutTests/fast/dom/move-style-element-to-inactive-document-crash.html b/LayoutTests/fast/dom/move-style-element-to-inactive-document-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..5a4dd90add11ef32cc91b128e09783d5a3ae75dc |
--- /dev/null |
+++ b/LayoutTests/fast/dom/move-style-element-to-inactive-document-crash.html |
@@ -0,0 +1,21 @@ |
+<!DOCTYPE html> |
+<body> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ |
+onload = function() { |
+ var style = document.createElement("style"); |
+ document.body.appendChild(style); |
+ var option = document.createElement("option"); |
+ |
+ var newdoc = document.implementation.createDocument("", null); |
+ newdoc.appendChild(document.body); |
+ style.appendChild(option); |
+ |
+ document.body = document.createElement('body'); |
+ document.body.innerHTML = 'PASS if no crash.'; |
+} |
+</script> |
+</body> |
+ |