src/third_party/WebKit/LayoutTests/fast/dom/Element/normalize-crash.html

   1 <p>This test passes if it does not crash.</p>
   2 <div id="test1"></div>
   3 <script>
   4 if (window.testRunner)
   5     testRunner.dumpAsText();
   6
   7 var elem = document.getElementById("test1");
   8
   9 function go()
  10 {
  11     var str = "c";
  12     for (var i = 0; i < 0x10000; i++)
  13         var b = str + str;
  14 }
  15
  16 function handler()
  17 {
  18     elem.removeAttribute("b");
  19     go();
  20 }
  21
  22 elem.setAttribute("b", "a");
  23 elem.attributes[0].appendChild(document.createTextNode("hi"));
  24 elem.attributes[0].addEventListener("DOMSubtreeModified", handler,  false);
  25 elem.normalize();
  26 </script>