third_party/WebKit/LayoutTests/fast/dom/MutationObserver/mutation-callback-non-element-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <body>
   4 <script>
   5 if (window.testRunner)
   6     testRunner.dumpAsText();
   7
   8 function mutationCallback(mutations, observer) {
   9     mutations[0].addedNodes[-1];
  10 }
  11
  12 var mutationObserver = new MutationObserver(mutationCallback);
  13 mutationObserver.observe(document.body, {childList: true});
  14 document.body.appendChild(document.createTextNode("PASS. WebKit didn't crash"));
  15 </script>
  16 </body>
  17 </html>