Bug 667025 - crash test.

This commit is contained in:
Jesse Ruderman 2011-06-25 04:21:27 +02:00
parent ada13e3c90
commit eabd47d1e6
2 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,22 @@
<html>
<head>
<script>
function boom()
{
document.documentElement.offsetHeight;
document.documentElement.style.direction = "rtl";
document.documentElement.offsetHeight;
var s = document.getElementById("s");
s.removeChild(s.firstChild);
document.documentElement.offsetHeight;
}
</script>
</head>
<body onload="boom();" style="width: 1px;"><span id="s"> x y</span></body>
</html>

View File

@ -364,3 +364,4 @@ load text-overflow-form-elements.html
load text-overflow-iframe.html
load text-overflow-bug666751-1.html
load text-overflow-bug666751-2.html
load 667025.html