The Tor Browser: diff content/base/crashtests/450383-1.html

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/content/base/crashtests/450383-1.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,9 @@
     1.4 +<html>
     1.5 +<BODY></BODY>
     1.6 +<SCRIPT>
     1.7 +    document.addEventListener("DOMCharacterDataModified",function(){
     1.8 +        document.body.innerHTML=""; // change this to see memory corruption
     1.9 +    },true);
    1.10 +    document.body.innerHTML="<optGroup</form<textArea";
    1.11 +</SCRIPT>
    1.12 +</html>

The Tor Browser / file diff

diff: content/base/crashtests/450383-1.html

content/base/crashtests/450383-1.html