Bug 1061028 - crashtest.

layout/base/crashtests/1061028.html

@@ -0,0 +1,9 @@
+<style>td:first-letter {
+</style>
+><table border=0>
+	<td><table id=test1>><td id=test2>
+<script>
+setTimeout("tCFcrash()", 41);
+function tCFcrash() {
+test1.appendChild(test2);
+}</script>>

layout/base/crashtests/crashtests.list

@@ -440,3 +440,4 @@ load 942690.html
 load 973390-1.html
 load 1001237.html
 load 1043163-1.html
+load 1061028.html