gecko/dom/base/crashtests/693894.html
Peter Van der Beken cce545a1cb Fix for bug 693894 (NodeList crash [@ js::GetObjectShape]). r=jst.
--HG--
extra : rebase_source : fe485e60f87633861c3aadde95c29af6d81ddcc9
2011-10-13 14:40:20 +02:00

9 lines
127 B
HTML

<!DOCTYPE html>
<script>
var nodeList = document.getElementsByName("html");
nodeList.__proto__ = null;
nodeList.x;
</script>