third_party/WebKit/LayoutTests/fast/dom/NamedNodeMap-setNamedItem-crash.html

   1 <script>
   2     if (window.testRunner)
   3         testRunner.dumpAsText();
   4
   5     onload = function()
   6     {
   7         document.body.attributes.setNamedItem(null);
   8     }
   9 </script>
  10 This passes if it does not crash.  (see https://bugs.webkit.org/show_bug.cgi?id=18958)