<!DOCTYPE html>
<html>
<head>
<style>
    marquee {
        padding-bottom: 1px;
    }
</style>

<script>
if (window.testRunner)
    testRunner.dumpAsText();

function editingTest() {
    document.designMode = "on";
    document.execCommand("SelectAll");
    document.execCommand("InsertHTML", false);
    document.write("PASS. WebKit didn't crash.");
};
</script>
</head>
<body onload=editingTest()>
    <marquee>
        aa
        <table></table>
    </marquee>
</body>
</html>