Add testcase for bug 603531

2010-10-16 22:24:56 -07:00 · 2010-10-16 22:24:56 -07:00 · 6ca8263f85
--- a/dom/base/crashtests/603531.html
+++ b/dom/base/crashtests/603531.html
@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+  var frame = document.getElementById("f");
+  var frameWindow = frame.contentWindow;
+  document.body.removeChild(frame);
+  document.body.setUserData("x", frameWindow, null);
+  document.body.setUserData("x", "", null);
+}
+
+</script>
+</head>
+<body onload="boom();"><iframe id="f" src="data:text/html,"></iframe></body>
+</html>
--- a/dom/base/crashtests/crashtests.list
+++ b/dom/base/crashtests/crashtests.list
@ -22,4 +22,5 @@ load 499006-1.html
 load 499006-2.html
 load 502617.html
 asserts(1) load 504224.html # bug 564098
+load 603531.html
 load 601247.html