Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: dom/base/crashtests/crashtests.list
<!DOCTYPE HTML>
<html>
<head>
<script type="application/javascript">
// Crashes if 'target' doesn't get properly unlinked in nsINode::LastRelease
function crash() {
var target = document.getElementById('target');
var io = new IntersectionObserver(function () { }, { });
io.observe(target);
document.body.removeChild(target);
}
</script>
</head>
<body onload="crash()">
<div id="target" style="background: red; width: 50px; height: 50px"></div>
</body>
</html>