1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/layout/svg/crashtests/342923-1.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,23 @@
1.4 +<html>
1.5 +<head>
1.6 +<script>
1.7 +
1.8 +function boo()
1.9 +{
1.10 + var rect = document.createElementNS("http://www.w3.org/2000/svg", "rect");
1.11 + rect.setAttribute("stroke", "blue");
1.12 +
1.13 + document.body.appendChild(rect);
1.14 +}
1.15 +
1.16 +</script>
1.17 +</head>
1.18 +
1.19 +<body class="bodytext" onload="boo();">
1.20 +
1.21 +<div id="c1"></div>
1.22 +
1.23 +<p>In a debug trunk build from 2006-006-27, loading this page triggers an assertion. (It also triggers a CSS error in the console, but I think that's a known, separate bug.)</p>
1.24 +
1.25 +</body>
1.26 +</html>
