layout/generic/crashtests/604843.html
author Noemi Erli <nerli@mozilla.com>
Sat, 12 Jan 2019 00:00:06 +0200
changeset 453615 1ddef6cf6c7ee86191872cac0782b9f6dc01c923
parent 56310 847ed2b55fe0440a20dc06048a5932b9d4fb7da3
permissions -rw-r--r--
Merge mozilla-central to inbound. a=merge CLOSED TREE

<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  document.documentElement.offsetHeight;

  var c = document.getElementById("c");
  var t1 = document.createTextNode("x x x x x x x x x x x x x x x x x x x x");
  var t2 = document.createTextNode("y y y y y y y y y y y y y y y y y y y y y");
  c.appendChild(t1);
  c.appendChild(t2);
  document.documentElement.offsetHeight;

  var div = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
  c.insertBefore(div, t2);
  document.documentElement.offsetHeight;
}

</script>
</head>

<body onload="boom();" style="width: 5ch; font-family: monospace; margin: 0;">
<table><tbody><tr><td id="c"></td></tr></tbody></table>
</body>
</html>