third_party/WebKit/LayoutTests/fast/css-grid-layout/grid-crash-out-of-flow-positioned-element.html

   1 <!DOCTYPE html>
   2 <body style="display: inline-grid;">
   3 <style>
   4 .absolutelyPositioned { position: absolute; }
   5 </style>
   6 crbug.com/280451 - Heap-use-after-free in WebCore::LayoutGrid::computePreferredTrackWidth</br>
   7 This test has passed if it didn't crash.
   8 <script>
   9 if (window.testRunner)
  10     testRunner.dumpAsText();
  11
  12 var cell = document.createElement("cell");
  13 cell.setAttribute("class", "absolutelyPositioned");
  14 document.body.appendChild(cell);
  15 window.scrollBy(98, 28);
  16 cell.setAttribute("class", "nonExistent");
  17 </script>