third_party/WebKit/LayoutTests/fast/block/float/float-append-child-crash.html

   1 <span id=enclosingInline><span><div style="backround-image: rgba(27, 48); font: 110px/7em sans-serif; zoom: 36717; "> }  Z bP  v        ed
   2 </h3><span id=inlineToMove><div></div>
   3 x<div style='border-top: dashed; float: left; border: 4058 solid; '></div><div>x</div>
   4 <div><video>
   5
   6 <script>
   7 if (window.testRunner) {
   8     testRunner.dumpAsText();
   9 }
  10 function crash() {
  11     enclosingInline.appendChild(inlineToMove);
  12     document.body.offsetTop;
  13     document.body.innerHTML = "PASS. Test didn't crash.";
  14 }
  15 document.addEventListener("DOMContentLoaded", crash, false);
  16 </script>