<!DOCTYPE html>
<html>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
}

window.onload = function() {
    x.innerHTML += '';

    document.designMode = 'on';
    document.execCommand('selectall');
    document.execCommand('bold');

    document.body.offsetTop;
    document.body.innerHTML = "PASS. WebKit didn't crash.";
};
</script>
<div id="x"><iframe src="data:"></iframe>
<span><span><plaintext>