third_party/WebKit/LayoutTests/fast/dom/child-insertion-notify-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <script src="../../resources/js-test.js"></script>
   4 <script>
   5 function crash()
   6 {
   7     document.getElementById("test").innerHTML = "PASS. WebKit didn't crash.";
   8     gc();
   9 }
  10 </script>
  11 <div dir="auto" id="test">A<iframe onload="crash()"></iframe></div>
  12 </html>
  13