Loading layout/svg/crashtests/1402486.html 0 → 100644 +12 −0 Original line number Diff line number Diff line <script> function jsfuzzer() { try { a.getEndPositionOfChar(0); } catch(e) { } } </script> <body onload=jsfuzzer()> <svg> <switch> <text id="a"> </text> <feTurbulence <!-- a --> No newline at end of file layout/svg/crashtests/crashtests.list +1 −0 Original line number Diff line number Diff line Loading @@ -204,5 +204,6 @@ load 1322852.html load 1348564.svg load 1402109.html load 1402124.html load 1402486.html load conditional-outer-svg-nondirty-reflow-assert.xhtml load extref-test-1.xhtml Loading
layout/svg/crashtests/1402486.html 0 → 100644 +12 −0 Original line number Diff line number Diff line <script> function jsfuzzer() { try { a.getEndPositionOfChar(0); } catch(e) { } } </script> <body onload=jsfuzzer()> <svg> <switch> <text id="a"> </text> <feTurbulence <!-- a --> No newline at end of file
layout/svg/crashtests/crashtests.list +1 −0 Original line number Diff line number Diff line Loading @@ -204,5 +204,6 @@ load 1322852.html load 1348564.svg load 1402109.html load 1402124.html load 1402486.html load conditional-outer-svg-nondirty-reflow-assert.xhtml load extref-test-1.xhtml