js/xpconnect/crashtests/753162.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5
   6 function boom()
   7 {
   8   var frameDoc = document.getElementById("f").contentDocument;
   9   frameDoc.write("2");
  10   var f = function(event) {
  11     frameDoc.removeEventListener("DOMAttrModified", f);
  12     Math.sin(2.10);
  13     frameDoc.write("4");
  14   };
  15   frameDoc.addEventListener("DOMAttrModified", f);
  16   frameDoc.write("<html d>");
  17 }
  18
  19 </script>
  20 </head>
  21
  22 <body onload="boom();"><iframe id="f" srcdoc="1"></iframe></body>
  23 </html>