third_party/WebKit/LayoutTests/fast/replaced/render-inline-cast-to-render-box-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <script>
   4 if (window.testRunner)
   5     testRunner.dumpAsText();
   6 </script>
   7 <style>
   8 span {
   9     position: relative;
  10     height:100px;
  11 }
  12 img {
  13     position: absolute;
  14     height: 50%;
  15 }
  16 </style>
  17 <body>
  18 <span>
  19  <img />
  20 </span>
  21 PASS. WebKit didn't crash.
  22 </body>
  23 </html>