layout/svg/crashtests/359516-1.svg

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/layout/svg/crashtests/359516-1.svg	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,36 @@
     1.4 +<svg xmlns="http://www.w3.org/2000/svg" 
     1.5 +     xmlns:html="http://www.w3.org/1999/xhtml"
     1.6 +     class="reftest-wait"
     1.7 +     onload="setTimeout(doStuff, 30);">
     1.8 +
     1.9 +<html:script style="display: none;" type="text/javascript">
    1.10 +
    1.11 +function doStuff()
    1.12 +{
    1.13 +  var svg = document.documentElement;
    1.14 +  var ellipse = document.getElementById("ellipse");
    1.15 +  var filter = document.getElementById("filter");
    1.16 +
    1.17 +  document.addEventListener("DOMNodeRemoved", foopy, false);
    1.18 +  filter.removeChild(filter.firstChild);
    1.19 +  document.removeEventListener("DOMNodeRemoved", foopy, false);
    1.20 +  
    1.21 +  function foopy()
    1.22 +  {
    1.23 +    document.removeEventListener("DOMNodeRemoved", foopy, false);
    1.24 +    svg.appendChild(filter);
    1.25 +  }
    1.26 +
    1.27 +  // Needed for the crash, but not for the assertion.
    1.28 +  svg.appendChild(ellipse);
    1.29 +  
    1.30 +  document.documentElement.removeAttribute("class");
    1.31 +}
    1.32 +
    1.33 +</html:script>
    1.34 +
    1.35 +<ellipse id="ellipse" cx="200" cy="150" rx="70" ry="40" style="filter: url(#filter);"/>
    1.36 +
    1.37 +<filter id="filter"> </filter>
    1.38 +
    1.39 +</svg>

mercurial