1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/svg/crashtests/620034-1.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,15 @@ 1.4 +<!DOCTYPE html> 1.5 +<script> 1.6 + 1.7 +function boom() 1.8 +{ 1.9 + var f = document.createElementNS("http://www.w3.org/2000/svg", "feFuncB"); 1.10 + var tvb = f.tableValues.baseVal; 1.11 + f.setAttribute("tableValues", "3 7 5"); 1.12 + f.setAttribute("tableValues", "i"); 1.13 + tvb.numberOfItems; 1.14 +} 1.15 + 1.16 +boom(); 1.17 + 1.18 +</script>