1 files changed, 30 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-grid/grid-table-cell-001-crash.html b/testing/web-platform/tests/css/css-grid/grid-table-cell-001-crash.html
new file mode 100644
index 0000000000..7b9c09e3af
--- /dev/null
+++ b/testing/web-platform/tests/css/css-grid/grid-table-cell-001-crash.html
@@ -0,0 +1,30 @@
+<!DOCTYPE html>
+<html>
+<head>
+<link rel="author" title="Daniel Holbert" href="mailto:dholbert@mozilla.com">
+<link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1232875">
+<script>
+
+function boom()
+{
+    document.documentElement.offsetHeight;
+    document.getElementsByTagName("table")[0].style.inlineSize = "1px";
+    document.documentElement.offsetHeight;
+    document.getElementsByTagName("td")[0].style.display = "inline-grid";
+    document.documentElement.offsetHeight;
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<table style="writing-mode: vertical-rl; table-layout: fixed;">
+    <caption style="float: inline-end;">A B</caption>
+    <tbody><tr><td></td></tr></tbody>
+</table>
+
+<div style="height: 3000px;"></div>
+
+</body>
+</html>