dom/base/crashtests/693811-2.html

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/dom/base/crashtests/693811-2.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,16 @@
     1.4 +<!DOCTYPE html>
     1.5 +<script>
     1.6 +
     1.7 +var collection = document.images;
     1.8 +var other = document.embeds;
     1.9 +var options = document.createElement("select").options;
    1.10 +collection.toString;
    1.11 +options.selectedIndex;
    1.12 +Object.defineProperty(Object.getPrototypeOf(collection),
    1.13 +                      "item",
    1.14 +                      { value: {}, enumerable: true, configurable: true });
    1.15 +other.toString;
    1.16 +collection.toString;
    1.17 +options.selectedIndex;
    1.18 +options.toString;
    1.19 +</script>

mercurial