layout/generic/crashtests/603510-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

<!DOCTYPE html>
<script>

function boom()
{
  var r = document.documentElement;

  while (r.firstChild)
    r.removeChild(r.firstChild);

  var a = document.createTextNode("a");
  r.appendChild(a);
  a.splitText(0);
  a.splitText(0);

  document.documentElement.offsetHeight;

  r.appendChild(document.createTextNode("b"));
}

window.addEventListener("load", boom, false);

</script>