gecko/dom/base/crashtests/695867.html
Peter Van der Beken ed7ffc3fae Bug 695867 - Crash [@ LookupPropertyById] with getPropertyDescriptor returning a NodeList. r=bz.
--HG--
extra : rebase_source : 7647c232594ab918b9c4488e8cb56d77dfea9b42
2011-10-27 19:31:37 +02:00

10 lines
198 B
HTML

<!DOCTYPE html>
<script>
var nodeList = document.documentElement.childNodes;
nodeList.__proto__ = null;
var p = Proxy.create({getPropertyDescriptor: function() {return nodeList}});
p.x;
</script>