third_party/WebKit/LayoutTests/fast/dom/MutationObserver/disconnect-transient-crash.html

   1 <!DOCTYPE html>
   2 <div>Test passes if it does not crash</div>
   3 <script>
   4 if (window.testRunner) testRunner.dumpAsText();
   5 var div = document.createElement('div');
   6 var span = document.createElement('span');
   7 div.appendChild(span);
   8 var observer = new MutationObserver(function(){});
   9 observer.observe(div, { attributes: true, subtree: true });
  10 div.removeChild(span); // cause span to become transiently observed
  11 div = null;
  12 gc(); // collect div's wrapper
  13 observer.disconnect();
  14 </script>