1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/layout/generic/crashtests/424629.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,21 @@
1.4 +<html>
1.5 +<head>
1.6 +<script type="text/javascript">
1.7 +
1.8 +function boom()
1.9 +{
1.10 + document.getElementById("o").appendChild(document.createTextNode('d'));
1.11 + document.body.offsetHeight;
1.12 + document.getElementById("b").firstChild.data = "\u202E";
1.13 + document.getElementById("a").firstChild.data = "ZZZZZZZ";
1.14 +}
1.15 +
1.16 +</script>
1.17 +</head>
1.18 +
1.19 +<body onload="boom();" style="font-family: monospace; width: 8ch;">
1.20 +
1.21 +<div><span id="o"><span id="a">a</span><span id="b">b‮</span><span> c </span></span></div>
1.22 +
1.23 +</body>
1.24 +</html>
