Index: LayoutTests/fast/dom/Element/normalize-crash2.html |
diff --git a/LayoutTests/fast/dom/Element/normalize-crash2.html b/LayoutTests/fast/dom/Element/normalize-crash2.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..32d9ce23ce1cebafdedd2408f73685046eea366c |
--- /dev/null |
+++ b/LayoutTests/fast/dom/Element/normalize-crash2.html |
@@ -0,0 +1,12 @@ |
+<!DOCTYPE html> |
+<script src="../../../resources/js-test.js"></script> |
+<div name="testDiv" id="testDiv"></div> |
+<script> |
+description("This test passes if it does not crash."); |
+ |
+var testDiv = document.getElementById("testDiv"); |
+testDiv.attributes[0].appendChild(new Text("test")); |
+testDiv.cloneNode(false); |
+gc(); |
+testDiv.normalize(); |
+</script> |