1 <html> 2 <head> 3 <title>RenderMenuList::itemStyle Select Element Crash</title> 4 <script> 5 function removeItem() { 6 var select = document.getElementById("dropDown"); 7 select.removeChild(document.getElementsByTagName("option")[2]); 8 } 9 </script> 10 </head> 11 <body> 12 <select id="dropDown" onfocus="setTimeout('removeItem();', 2000);"> 13 <option>Option 1</option> 14 <option>Option 2</option> 15 <option>Option 3</option> 16 </select> 17 <p>This is a test for bug <a href="http://webkit.org/b/34182">34182</a> Crash in WebKit!WebCore::RenderMenuList::itemStyle. 18 Once the select gets focus, in 2 seconds it will delete an item. This test passes 19 if you have the select open when it deletes an item, and doesn't crash.</p> 20 </body> 21 </html> 22