gecko-dev/layout/generic/crashtests/517968.html

<script>
var rng = document.createRange();
window.getSelection()["addRange"](rng);
window.getSelection()["addRange"](rng);
window.getSelection()["addRange"](rng);
</script>