layout/generic/crashtests/660416.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  document.documentElement.offsetHeight;
  var n = document.getElementById("a").firstChild;
  n.data = "";
  n.data = "z";
}

</script>
</head>
<body onload="boom();" style="-moz-column-count: 3;"><span id="a">x&#x202E;</span><span>y</span></body>
</html>