layout/generic/crashtests/688996-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

<!DOCTYPE html><html><head><script>
function boom()
{
  var a = document.getElementsByTagName('div')[0];
  var b = a.firstChild;

  var r = document.createRange();
  r.setStart(b, 1);
  r.setEnd(a, 1);

  var s = document.createRange();
  s.setStart(b, 0);
  s.setEnd(a, 1);
  s.deleteContents();
}
</script></head><body onload="boom();">
<div>b</div>
</body></html>