1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/438266-1.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,33 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<script type="text/javascript"> 1.8 + 1.9 +function boom() 1.10 +{ 1.11 + document.getElementById("hr").removeAttribute("width"); 1.12 + 1.13 + document.documentElement.offsetHeight; 1.14 + 1.15 + var newTR = document.createElement("tr"); 1.16 + document.getElementById("table").appendChild(newTR); 1.17 +} 1.18 + 1.19 +</script> 1.20 +</head> 1.21 + 1.22 +<body onload="boom()"> 1.23 + 1.24 +<table id="table"> 1.25 + <tbody> 1.26 + <tr> 1.27 + <td> 1.28 + <div><hr width="7000" id="hr"></div> 1.29 + <div style="-moz-column-width: 100px;">x<li></li></div> 1.30 + </td> 1.31 + </tr> 1.32 + </tbody> 1.33 +</table> 1.34 + 1.35 +</body> 1.36 +</html>