1 files changed, 24 insertions, 0 deletions
diff --git a/layout/generic/crashtests/400223-1.html b/layout/generic/crashtests/400223-1.html
new file mode 100644
index 0000000000..022d7a6d71
--- /dev/null
+++ b/layout/generic/crashtests/400223-1.html
@@ -0,0 +1,24 @@
+<html>
+<head>
+<style type="text/css">
+
+    #colset {
+      height: 2in;
+      column-count: 3;
+    }
+    #container {
+      position: relative;
+    }
+    #overflow {
+      position: absolute;
+      height: 5in;
+    }
+  
+</style>
+</head>
+
+<body onload="document.getElementById('container').style.counterIncrement = 'foo';">
+<div id="colset"><div id="container"><div id="overflow"></div></div></div>
+</body>
+
+</html>