summaryrefslogtreecommitdiff
path: root/dom/base/crashtests/529670.html
blob: 52e66ab8c2991195d4dc24c7d6f1813dd09ce7dd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<!DOCTYPE HTML>
<html><head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <title>Testcase for bug 529670</title>
<script>
function boom() {
  document.createRange().getClientRects()
  document.createRange().getBoundingClientRect()

  var range = document.createRange();
  range.detach();
  range.getClientRects()
  range.getBoundingClientRect()
}
</script>
</head>
<body onload="boom()"></body>
</html>