gecko-dev/content/base/crashtests/667336-1.html

mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-02 15:15:23 +00:00
<!DOCTYPE html>
<script>
document.createElement("div").children.item(-1);
</script>
Bug 667336. Make sure we don't overflow unsigned int on item(). r=peterv 2011-07-26 14:01:31 +00:00			`<!DOCTYPE html>`
			`<script>`
			`document.createElement("div").children.item(-1);`
			`</script>`