<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title></title>
<style type="text/css">
#targeta:first-letter { color: blue; }
#targetb:first-letter { color: blue; }
#targetc:first-letter { color: blue; }
</style>
<script type="text/javascript">
function test()
{
document.body.offsetTop;
document.getElementById("targeta").innerHTML = "PASS";
document.getElementById("targetb").firstChild.data = "PASS";
document.getElementById("targetc").replaceChild(document.createTextNode("PASS"), document.getElementById("targetc").firstChild);
}
</script>
</head>
<body onload="test()">
<p>
Test for <i><a href="https://bugs.webkit.org/show_bug.cgi?id=3560">http://bugzilla.opendarwin.org/show_bug.cgi?id=3560</a>
page with use of first-letter crashes reproducibly in LayoutObject::renderArena()</i>.
</p>
<p>
The next three lines should all read “<span style="color: blue;">P</span>ASS”, with nothing before the P.
</p>
<hr>
<p id="targeta">didn’t run</p>
<p id="targetb">didn’t run</p>
<p id="targetc">didn’t run</p>
</body>
</html>