summaryrefslogtreecommitdiff
path: root/layout/base/crashtests/931464.html
blob: 637020331284e099c08dc2557f86b5d102a6308d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<script>

function boom()
{
  var fieldset = document.getElementById("f");
  for (var i = 0; i < 2; ++i)
    fieldset.appendChild(document.createElement("span"));
}

</script>
<body onload="boom();">
<fieldset id="f" style="overflow: auto;"></fieldset>
</body>
</html>