1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/667025.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,22 @@ 1.4 +<html> 1.5 +<head> 1.6 +<script> 1.7 + 1.8 +function boom() 1.9 +{ 1.10 + document.documentElement.offsetHeight; 1.11 + 1.12 + document.documentElement.style.direction = "rtl"; 1.13 + 1.14 + document.documentElement.offsetHeight; 1.15 + var s = document.getElementById("s"); 1.16 + 1.17 + s.removeChild(s.firstChild); 1.18 + 1.19 + document.documentElement.offsetHeight; 1.20 +} 1.21 + 1.22 +</script> 1.23 +</head> 1.24 +<body onload="boom();" style="width: 1px;"><span id="s"> x y</span></body> 1.25 +</html>