third_party/WebKit/LayoutTests/fast/block/percent-height-descendant-not-removed-crash2.html

   1 <html>
   2 <head>
   3 <style>
   4 #test1 {
   5     height: 1px;
   6     -webkit-writing-mode: vertical-rl;
   7 }
   8 #test1:nth-child(3) {
   9     height: auto;
  10 }
  11 </style>
  12 <script>
  13 if (window.testRunner)
  14     testRunner.dumpAsText();
  15
  16 onload = function() {
  17     document.body.appendChild(document.createElement('form'));
  18     test1 = document.createElement('input');
  19     test1.setAttribute('id', 'test1');
  20     test1.setAttribute('type', 'range');
  21     document.body.appendChild(test1);
  22     document.designMode = 'on';
  23     document.execCommand('selectall');
  24     document.execCommand('FormatBlock', false, '<'+'pre>');
  25     document.body.offsetTop;
  26     document.body.innerHTML = "WebKit bug 88017 - Crash due to renderer not removed from height descendant map.<br />PASS. WebKit didn't crash.";
  27 }
  28 </script>
  29 </head>
  30 <body>
  31 </body>
  32 </html>