1 files changed, 30 insertions, 0 deletions
diff --git a/dom/base/crashtests/1693049.html b/dom/base/crashtests/1693049.html
new file mode 100644
index 0000000000..9495aa39a2
--- /dev/null
+++ b/dom/base/crashtests/1693049.html
@@ -0,0 +1,30 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <style>
+
+        * {
+            all: initial;
+            display: table-row-group !important
+        }
+    </style>
+    <script>
+      window.addEventListener('load', () => {
+        const mspace = document.getElementById('id_0')
+        const tfoot = document.createElement('tfoot')
+        const h5 = document.createElement('h5')
+        document.documentElement.appendChild(tfoot)
+        document.documentElement.appendChild(h5)
+        const range = new Range()
+        range.setStart(tfoot, NaN)
+        setTimeout(async () => selection.extend(h5, Nan), 107)
+        const selection = document.getSelection()
+        selection.addRange(range)
+        selection.modify('move', 'backward', 'character')
+        range.surroundContents(mspace)
+      })
+    </script>
+</head>
+<mspace id='id_0'></mspace>
+<input type='reset'>
+</html>