dom/base/crashtests/679459.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5
   6 function boom()
   7 {
   8   var t = document.createTextNode("a");
   9   document.body.appendChild(t);
  10   var r1 = document.createRange();
  11   r1.setEnd(t, 1);
  12   var r2 = document.createRange();
  13   r2.setEnd(t, 0);
  14   r2.deleteContents();
  15 }
  16
  17 </script>
  18 </head>
  19
  20 <body onload="boom();"></body>
  21 </html>