dom/plugins/test/crashtests/752340.html

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/dom/plugins/test/crashtests/752340.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,19 @@
     1.4 +<!DOCTYPE HTML>
     1.5 +<html>
     1.6 +<head>
     1.7 +  <script type="text/javascript">
     1.8 +    // Failures in this file can manifest as ###!!! ASSERTION: scope has non-empty map: '0 == mWrappedNativeMap->Count()'
     1.9 +    // followed by an Assertion failure: allocated() crash during the next GC.
    1.10 +    // It can also manifest as a leak.
    1.11 +    function breakthings() {
    1.12 +      var e = document.createElement("embed");
    1.13 +      var i = document.getElementById("i");
    1.14 +      i.contentDocument.body.appendChild(e);
    1.15 +      i.src = "about:blank";
    1.16 +    }
    1.17 +  </script>
    1.18 +</head>
    1.19 +<body onload="javascript:breakthings();">
    1.20 +<iframe id="i" />
    1.21 +</body>
    1.22 +</html>

mercurial