third_party/WebKit/LayoutTests/fast/css-grid-layout/grid-item-before-anonymous-child-crash.html

   1 <body>
   2   <p>This test checks that adding a new grid item before an already existing item wrapped by an anonymous block does not crash under ASAN.</p>
   3   <div id=grid style="display: grid; grid-auto-flow: stack;">X</div>
   4 </body>
   5 <script type="text/javascript">
   6  if (window.testRunner)
   7    testRunner.dumpAsText();
   8
   9  document.addEventListener("DOMContentLoaded", crash, false);
  10
  11  function crash() {
  12    document.designMode = 'on';
  13    window.getSelection().selectAllChildren(grid);
  14    document.execCommand("Italic", null);
  15  }
  16 </script>