Hi,
Try
<html><head><script>
function init() {
var doc = myframe.document;
doc.open("text/html");
doc.write("<html><body>hi</body></html>");
doc.close();
}
</script></head>
<frameset onLoad='init()'>
<frame NAME="myframe" SRC="about:blank">
</frameset>
</html>
it hangs in RenderCanvas::docHeight() because
layer == layer->nextSibling()
Koos