third_party/WebKit/LayoutTests/svg/custom/intersection-list-crash.svg

   1 <svg onload="runTest()" xmlns="http://www.w3.org/2000/svg" id="askedForIntersection">
   2 <style>
   3 .c1:nth-last-of-type(1n) { }
   4 </style>
   5 <script>
   6 if (window.testRunner)
   7     testRunner.dumpAsText();
   8
   9 function runTest()
  10 {
  11     docElement = document.documentElement;
  12     textarea = document.createElementNS("http://www.w3.org/1999/xhtml", "textarea");
  13     textarea.setAttribute("class", "c1");
  14     docElement.appendChild(textarea);
  15     object = document.createElementNS("http://www.w3.org/1999/xhtml", "object");
  16     object.setAttribute("usemap", "#DivLogo-map");
  17     iframe = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");
  18     docElement.appendChild(iframe);
  19     var svg = document.getElementById('askedForIntersection');
  20     var rect = svg.createSVGRect();
  21     svg.getIntersectionList(rect, svg);
  22 }
  23 </script>
  24 <rect style='content: counters(c, ".", decimal)'></rect>
  25 <text x="10" y="50">PASS. WebKit didn't crash.</text>
  26 </svg>