third_party/WebKit/LayoutTests/svg/custom/detached-outermost-svg-crash.html

   1 <script>
   2 if (window.testRunner)
   3     testRunner.dumpAsText();
   4
   5 var svg = document.createElementNS("http://www.w3.org/2000/svg", "svg");
   6 for (prop in svg) {
   7     // Access all the properties on the <svg> element
   8     // at least one of them (like viewport) will call SVGSVGElement::isOutermostSVG()
   9     // and will trigger the crash seen in https://bugs.webkit.org/show_bug.cgi?id=25105
  10     svg[prop];
  11 }
  12 </script>
  13 <div>PASSED -- webkit did not crash in SVGSVGElement::isOutermostSVG().  See https://bugs.webkit.org/show_bug.cgi?id=25105</div>