summaryrefslogtreecommitdiff
path: root/widget/cocoa/crashtests/464589-1.html
diff options
context:
space:
mode:
Diffstat (limited to 'widget/cocoa/crashtests/464589-1.html')
-rw-r--r--widget/cocoa/crashtests/464589-1.html20
1 files changed, 20 insertions, 0 deletions
diff --git a/widget/cocoa/crashtests/464589-1.html b/widget/cocoa/crashtests/464589-1.html
new file mode 100644
index 0000000000..d25d92315d
--- /dev/null
+++ b/widget/cocoa/crashtests/464589-1.html
@@ -0,0 +1,20 @@
+<html>
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+ var o2 = document.createElement("option");
+ document.getElementById("o1").appendChild(o2);
+ o2.style.padding = "131072cm";
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<select><option id="o1" style="height: 0cm;"></option></select>
+
+</body>
+</html>