dom/base/crashtests/841205.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5
   6 function boom()
   7 {
   8   var b = document.createElement('bdi');
   9   var c = document.createElement('div');
  10   var d = document.createElement('div');
  11
  12   b.appendChild(c);
  13   c.appendChild(d);
  14   b.removeChild(c);
  15   d.appendChild(b);
  16   document.createElement('div').appendChild(c);
  17   b.appendChild(document.createElement('div'));
  18
  19   b.setAttribute('dir', "auto");
  20 }
  21
  22 </script>
  23 </head>
  24 <body onload="boom();"></body>
  25 </html>