1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/660416.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,17 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<script> 1.8 + 1.9 +function boom() 1.10 +{ 1.11 + document.documentElement.offsetHeight; 1.12 + var n = document.getElementById("a").firstChild; 1.13 + n.data = ""; 1.14 + n.data = "z"; 1.15 +} 1.16 + 1.17 +</script> 1.18 +</head> 1.19 +<body onload="boom();" style="-moz-column-count: 3;"><span id="a">x‮</span><span>y</span></body> 1.20 +</html>