Bug 1387499 - Crashtest. r=me

MozReview-Commit-ID: 59I61PQIWHi
2017-08-08 20:28:52 -07:00 · 2017-08-08 20:28:52 -07:00 · 9fb54004da
--- a/layout/style/crashtests/1387499.html
+++ b/layout/style/crashtests/1387499.html
@ -0,0 +1,15 @@
+<html>
+  <head>
+    <script>
+      try { o1 = document.createElement('code') } catch(e) { }
+      try { o2 = document.createElement('iframe') } catch(e) { }
+      try { document.documentElement.appendChild(o2) } catch(e) { }
+      try { o3 = o2.getSVGDocument() } catch(e) { }
+      try { o4 = document.caretPositionFromPoint(1, 1) } catch(e) { }
+      try { o3.head.appendChild(o1); } catch(e) { }
+      try { document.replaceChild(document.documentElement, document.documentElement); } catch(e) { }
+      try { document.replaceChild(o3.firstElementChild, document.documentElement); } catch(e) { }
+      window.close()
+    </script>
+  </head>
+</html>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@ -199,3 +199,4 @@ load 1383981-2.html
 load 1384824-1.html
 load 1384824-2.html
 load 1387481-1.html
+load 1387499.html