summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/1428892.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/base/crashtests/1428892.html15
1 files changed, 15 insertions, 0 deletions
diff --git a/layout/base/crashtests/1428892.html b/layout/base/crashtests/1428892.html
new file mode 100644
index 0000000000..3c90997e95
--- /dev/null
+++ b/layout/base/crashtests/1428892.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+<script>
+img = new Image(0, 2)
+document.documentElement.appendChild(img)
+frm = document.createElement("iframe")
+frm.align = "right"
+document.documentElement.appendChild(frm)
+img.append(undefined, undefined, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\rAAAAA=[AAAAAAAAAAAAAA\u066B\bAAAAAAAAAAAAAAAA*<AAAAAA")
+</script>
+<style>
+html { width: 300px; column-width: 100px; height: 100px; }
+</style>
+<div style="float: left; height: 5px;"></div>
+<div style="clear: left;"><feDiffuseLighting><div style="float: right;"></div></div>