1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/472776-1.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,20 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<script type="text/javascript"> 1.8 + 1.9 +function boom() 1.10 +{ 1.11 + var v = document.getElementById("v"); 1.12 + v.childNodes[1].firstChild.data = ""; 1.13 + document.documentElement.offsetHeight; 1.14 + v.appendChild(document.createTextNode("D")); 1.15 + v.removeChild(v.firstChild); 1.16 +} 1.17 + 1.18 +</script> 1.19 +</head> 1.20 +<body onload="boom();"> 1.21 +<div id="v"><span>A</span><span>یC</span></div> 1.22 +</body> 1.23 +</html>