1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/dom/plugins/test/crashtests/752340.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,19 @@ 1.4 +<!DOCTYPE HTML> 1.5 +<html> 1.6 +<head> 1.7 + <script type="text/javascript"> 1.8 + // Failures in this file can manifest as ###!!! ASSERTION: scope has non-empty map: '0 == mWrappedNativeMap->Count()' 1.9 + // followed by an Assertion failure: allocated() crash during the next GC. 1.10 + // It can also manifest as a leak. 1.11 + function breakthings() { 1.12 + var e = document.createElement("embed"); 1.13 + var i = document.getElementById("i"); 1.14 + i.contentDocument.body.appendChild(e); 1.15 + i.src = "about:blank"; 1.16 + } 1.17 + </script> 1.18 +</head> 1.19 +<body onload="javascript:breakthings();"> 1.20 +<iframe id="i" /> 1.21 +</body> 1.22 +</html>