Source/WebCore: [V8] Crash in npObjectGetProperty() in V8NPObject.cpp
[WebKit-https.git] / LayoutTests / plugins / object-onfocus-mutation-crash.html
1 <!DOCTYPE html>
2 <html>
3 <body>
4 <script>
5 if (window.layoutTestController) {
6     layoutTestController.dumpAsText();
7     layoutTestController.waitUntilDone();
8 }
9
10 function finish() {
11     if (window.layoutTestController)
12         layoutTestController.notifyDone();
13 }
14
15 function crash() {
16     document.body.innerHTML = "PASS. WebKit didn't crash.";
17     setTimeout("finish()", 0);
18 }
19 </script>
20 <object data="a">
21 <input autofocus="" onfocus="crash()">
22 </object>
23 </body>
24 </html>