third_party/WebKit/LayoutTests/fast/dom/body-clone-link-decl-parent-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script src="../../resources/js-test.js"></script>
   5 </head>
   6 <body>
   7 Test passes if it does not crash.
   8 <div id="console"></div>
   9 <script>
  10 if (window.testRunner)
  11     testRunner.dumpAsText();
  12
  13 iframe1 = document.createElement('iframe');
  14 document.body.appendChild(iframe1);
  15 document1 = iframe1.contentDocument.implementation.createHTMLDocument("document");
  16 var body1 = document1.body;
  17 document1.alinkColor = "blue";
  18 var body2 = body1.cloneNode(true);
  19 document1.body = document1.createElement('body');
  20 delete document1;
  21 gc();
  22 body2.vLink = 1;
  23
  24 </script>
  25 </body>
  26 </html>