summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/463350-2.html
blob: ec457eb8cc9df2870ef1d1892ae1619fe6980f58 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<!DOCTYPE html>
<html>
<head>
<script type="text/javascript">

function boom()
{
  document.getElementById("select").appendChild(document.createElement("span"));
  document.documentElement.offsetHeight;
  document.getElementById("z").appendChild(document.createElement("span"));
}

</script>
</head>

<body onload="boom();" style="column-count: 2; height: 0;"><fieldset><span id="z"><div><div></div></div><select id="select"></select></span></fieldset></body>
</html>