<html>
<body>
<!-- script isn't actually required for the crash of bug 151956 -->
<table border>
<tbody>
<form>
<script>
var foo = 42;
</script>
</form>
<tr>
<td> X </td>
</tr>
</tbody>
</table>
</body>
</html>