1 files changed, 26 insertions, 0 deletions
diff --git a/layout/generic/crashtests/431260-2.html b/layout/generic/crashtests/431260-2.html
new file mode 100644
index 000000000..7fc9204c2
--- /dev/null
+++ b/layout/generic/crashtests/431260-2.html
@@ -0,0 +1,26 @@
+<html class="reftest-wait"><head><style>
+  title::first-letter {}
+  title {
+    display: inline;
+    float: left;
+    font-size: 16px;
+  }
+</style>
+<script>
+  function boom() {
+    document.documentElement.innerHTML = document.documentElement.innerHTML;
+    document.documentElement.removeAttribute("class");
+  }
+</script>
+<title>
+a
+b
+&#1593
+c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
+c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
+c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
+</title></head>
+<script>
+setTimeout(boom, 0);
+</script>
+</html>