summaryrefslogtreecommitdiffstats
path: root/third_party/WebKit/LayoutTests/fast/forms/past-names-crash.html
blob: 1e9fd1746b81cba3d9d9b646ce5e8a8b2a9bd544 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
<!DOCTYPE html>
<html>
<body>
<script src="../../resources/js-test.js"></script>
<div id="container">
<table>
<form id="form1">
<td>
<input name="q"/>
<script>
jsTestIsAsync = true;
var form1 = document.getElementById("form1");
var container = document.getElementById("container");
form1['q'];
container.innerHTML = '';
setTimeout(function() {
    container.insertBefore(form1, null);
    gc();
    container.innerHTML = 'PASS if not crashed.';
    finishJSTest();
}, 0);
</script>
</td>
</form>
</table>
</div>
</body>
</html>