dom/base/crashtests/529670.html

   1 <!DOCTYPE HTML>
   2 <html><head>
   3     <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   4     <title>Testcase for bug 529670</title>
   5 <script>
   6 function boom() {
   7   document.createRange().getClientRects()
   8   document.createRange().getBoundingClientRect()
   9
  10   var range = document.createRange();
  11   range.detach();
  12   range.getClientRects()
  13   range.getBoundingClientRect()
  14 }
  15 </script>
  16 </head>
  17 <body onload="boom()"></body>
  18 </html>