1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/svg/crashtests/359516-1.svg Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,36 @@ 1.4 +<svg xmlns="http://www.w3.org/2000/svg" 1.5 + xmlns:html="http://www.w3.org/1999/xhtml" 1.6 + class="reftest-wait" 1.7 + onload="setTimeout(doStuff, 30);"> 1.8 + 1.9 +<html:script style="display: none;" type="text/javascript"> 1.10 + 1.11 +function doStuff() 1.12 +{ 1.13 + var svg = document.documentElement; 1.14 + var ellipse = document.getElementById("ellipse"); 1.15 + var filter = document.getElementById("filter"); 1.16 + 1.17 + document.addEventListener("DOMNodeRemoved", foopy, false); 1.18 + filter.removeChild(filter.firstChild); 1.19 + document.removeEventListener("DOMNodeRemoved", foopy, false); 1.20 + 1.21 + function foopy() 1.22 + { 1.23 + document.removeEventListener("DOMNodeRemoved", foopy, false); 1.24 + svg.appendChild(filter); 1.25 + } 1.26 + 1.27 + // Needed for the crash, but not for the assertion. 1.28 + svg.appendChild(ellipse); 1.29 + 1.30 + document.documentElement.removeAttribute("class"); 1.31 +} 1.32 + 1.33 +</html:script> 1.34 + 1.35 +<ellipse id="ellipse" cx="200" cy="150" rx="70" ry="40" style="filter: url(#filter);"/> 1.36 + 1.37 +<filter id="filter"> </filter> 1.38 + 1.39 +</svg>