1 files changed, 38 insertions, 0 deletions
diff --git a/layout/base/crashtests/399687-1.html b/layout/base/crashtests/399687-1.html
new file mode 100644
index 000000000..f0693e5a5
--- /dev/null
+++ b/layout/base/crashtests/399687-1.html
@@ -0,0 +1,38 @@
+<html>
+<head>
+<style>
+
+#colset {
+  width: 300pt;
+  height: 2in;
+  -moz-column-count: 3;
+  -moz-column-gap: 0;
+}
+
+.ocontainer {
+  height: 0;
+}
+
+.overflow {
+  height: 5in;
+}
+
+</style>
+
+<script>
+function boom()
+{
+  var newDiv = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
+  var colset = document.getElementById("colset");
+  colset.insertBefore(newDiv, colset.childNodes[1]);
+}
+</script>
+
+</head>
+
+<body onload="boom();">
+
+<div id="colset"><div class="ocontainer"><div class="overflow"></div></div>    </div>
+
+</body>
+</html>