<html>
<!-- This test passes if there is no crash or assert -->
<style type="text/css">
    body {
        overflow: hidden;
    }
</style>
<script>
    function testCrash() {
        q = document.getElementById('root');
        r = document.createRange();
        r.selectNodeContents( q.getElementById('t') );
        window.getSelection().addRange(r)
        document.designMode='on';
        document.execCommand('delete');
        document.execCommand('delete');
      }

      if (window.testRunner)
        testRunner.dumpAsText();
</script>
<body onload="testCrash()">
<svg id="root" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
    <g>
        <rect filter="url(#x)"/>
        <text>aa</text>
        <rect id="t"/>
        <style></style>
        <text>bb</text>
    </g>
    <filter id="x"></filter>
</svg>
</body>
</html>