dom/xslt/crashtests/949990.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <meta charset="UTF-8">
   5 <script>
   6
   7 function boom() {
   8     document.evaluate("a", document.documentElement, null, 4096, null);
   9 }
  10
  11 </script>
  12 </head>
  13
  14 <body onload="boom()"></body>
  15 </html>