crash-adopt-node-from-new-document.html

<!DOCTYPE html>
<html>
<head>
<script src="../resources/js-test.js"></script>
</head>
<body>

<canvas>
<div id="node1">
<div id="node2">
</canvas>

<script>
document.getElementById("node2").setAttribute("aria-label", "Label");
document.implementation.createDocument("", "", null).adoptNode(node1);

gc();

alert("This test makes sure that adopting a node with an AccessibilityObject into a new document doesn't crash. Test passed.");

</script>
</body>
</html>

chromium/third_party/blink/web_tests/accessibility/crash-adopt-node-from-new-document.html