1 files changed, 26 insertions, 0 deletions
diff --git a/layout/base/crashtests/579655.html b/layout/base/crashtests/579655.html
new file mode 100644
index 000000000..460fa34c2
--- /dev/null
+++ b/layout/base/crashtests/579655.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<script type="text/javascript">
+function load()
+{
+  var bs=document.getElementById("b");
+  if(bs.lastChild){
+      bs.lastChild.textContent="text\/css";	
+      bs.textContent="head";
+  }
+}
+</script> 
+<body onload="load();">
+ <table > 
+   <td>
+     <p id="b">aaaa aaaa aaa aa aaaa aa aaaaaa aaaa aa aa aaa aaa aaaa aaaaaaa aaa aaaa aa a aaaa aaaa aaaaaaa aa aa aa aa aaaaaaa .</p>  
+      <body style="white-space:pre-wrap" >
+      </body>
+   </td>
+   <td dir="rtl" >
+     <body contenteditable="true"> 
+     </body>
+   </td> 
+ </table> 
+</body>
+</html>