OLD | NEW |
1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
2 <html> | 2 <html> |
3 <script> | 3 <script> |
4 if (window.testRunner) | 4 if (window.testRunner) |
5 testRunner.dumpAsText(); | 5 testRunner.dumpAsText(); |
6 | 6 |
7 var docElement = document.documentElement; | 7 var docElement = document.documentElement; |
8 function crash() { | 8 function crash() { |
9 svgAnimAttributeElement1 = document.createElementNS("http://www.w3.org/2000/
svg", "animattributeattrs"); | 9 svgAnimAttributeElement1 = document.createElementNS("http://www.w3.org/2000/
svg", "animattributeattrs"); |
10 mathElement1 = document.createElementNS("http://www.w3.org/1998/Math/MathML"
, "math"); | 10 mathElement1 = document.createElementNS("http://www.w3.org/1998/Math/MathML"
, "math"); |
11 mathElement1.setAttribute("class", "c0"); | 11 mathElement1.setAttribute("class", "c0"); |
12 svgAnimateElement1 = document.createElementNS("http://www.w3.org/2000/svg",
"animate"); | 12 svgAnimateElement1 = document.createElementNS("http://www.w3.org/2000/svg",
"animate"); |
13 svgTestcaseElement1 = document.createElementNS("http://www.w3.org/2000/svg",
"svgtestcase"); | 13 svgTestcaseElement1 = document.createElementNS("http://www.w3.org/2000/svg",
"svgtestcase"); |
14 svgEllipseElement1 = document.createElementNS("http://www.w3.org/2000/svg",
"ellipse"); | 14 svgEllipseElement1 = document.createElementNS("http://www.w3.org/2000/svg",
"ellipse"); |
15 mathElement2 = document.createElementNS("http://www.w3.org/1998/Math/MathML"
, "math"); | 15 mathElement2 = document.createElementNS("http://www.w3.org/1998/Math/MathML"
, "math"); |
16 docElement.appendChild(mathElement2); | 16 docElement.appendChild(mathElement2); |
17 svgLineElement1 = document.createElementNS("http://www.w3.org/2000/svg", "li
ne"); | 17 svgLineElement1 = document.createElementNS("http://www.w3.org/2000/svg", "li
ne"); |
18 textNode1 = document.createTextNode("mNfma;B N`p0ag "); | 18 textNode1 = document.createTextNode("mNfma;B N`p0ag "); |
19 svgEllipseElement1.addEventListener("touchcancel", function () {}, false); | 19 svgEllipseElement1.addEventListener("touchcancel", function () {}, false); |
20 document1 = document.implementation.createDocument("", null); | 20 document1 = document.implementation.createDocument("", "", null); |
21 svgAnimateElement1.appendChild(svgEllipseElement1); | 21 svgAnimateElement1.appendChild(svgEllipseElement1); |
22 mathElement1.attributes[0].appendChild(textNode1); | 22 mathElement1.attributes[0].appendChild(textNode1); |
23 mathElement2.appendChild(svgAnimateElement1); | 23 mathElement2.appendChild(svgAnimateElement1); |
24 document1.appendChild(svgLineElement1); | 24 document1.appendChild(svgLineElement1); |
25 svgLineElement1.appendChild(svgTestcaseElement1); | 25 svgLineElement1.appendChild(svgTestcaseElement1); |
26 mathElement1.attributes[0].addEventListener("DOMSubtreeModified", function (
) { document.open(); }, false); | 26 mathElement1.attributes[0].addEventListener("DOMSubtreeModified", function (
) { document.open(); }, false); |
27 svgTestcaseElement1.appendChild(svgAnimAttributeElement1); | 27 svgTestcaseElement1.appendChild(svgAnimAttributeElement1); |
28 document2 = document.implementation.createDocument("http://www.w3.org/1999/x
html", "html"); document2.adoptNode(textNode1); | 28 document2 = document.implementation.createDocument("http://www.w3.org/1999/x
html", "html", null); document2.adoptNode(textNode1); |
29 svgAnimAttributeElement1.appendChild(mathElement2); | 29 svgAnimAttributeElement1.appendChild(mathElement2); |
30 svgEllipseElement1.parentNode.removeChild(svgEllipseElement1); | 30 svgEllipseElement1.parentNode.removeChild(svgEllipseElement1); |
31 delete svgEllipseElement1; | 31 delete svgEllipseElement1; |
32 gc(); | 32 gc(); |
33 document.open(); | 33 document.open(); |
34 document.write("Passed. Test didn't crash."); | 34 document.write("Passed. Test didn't crash."); |
35 document.close(); | 35 document.close(); |
36 } | 36 } |
37 document.addEventListener("DOMContentLoaded", crash, false); | 37 document.addEventListener("DOMContentLoaded", crash, false); |
38 </script> | 38 </script> |
39 </html> | 39 </html> |
OLD | NEW |