third_party/WebKit/LayoutTests/fast/block/line-layout/line-break-obj-removal-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <style>
   4 .style1:nth-last-child(odd) { padding-right: 100px; }
   5 .styleCounterBefore:before { position: absolute; content: counter(section); }
   6 </style>
   7 <script>
   8 window.onload = function() {
   9     divElem = document.createElement('div');
  10     divElem.setAttribute('class', 'styleCounterBefore');
  11     document.documentElement.appendChild(divElem);
  12     brElem = document.createElement('br');
  13     document.documentElement.appendChild(brElem);
  14     sampElem = document.createElement('samp');
  15     sampElem.setAttribute('class', 'style1');
  16     document.documentElement.appendChild(sampElem);
  17     spanElem = document.createElement('span');
  18     spanElem.setAttribute('class', 'styleCounterBefore');
  19     trElem = document.createElement('tr');
  20     document.documentElement.appendChild(trElem);
  21     sampElem.appendChild(spanElem);
  22     document.documentElement.offsetHeight;
  23     document.documentElement.removeChild(trElem);
  24
  25     document.documentElement.appendChild(document.createTextNode('PASS, if no crash or assert in debug'));
  26
  27     if (window.testRunner)
  28         testRunner.dumpAsText();
  29 }
  30 </script>
  31 </html>