third_party/WebKit/LayoutTests/fast/table/auto-table-layout-colgroup-removal-crash.html

   1 <!DOCTYPE html>
   2 <p>Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=88676">88676</a>: Crash in TableLayoutAlgorithmFixed::layout</p>
   3 <p id="console">FAILED, the test didn't run.</p>
   4 <table id="table">
   5     <tbody>
   6         <tr></tr>
   7     </tbody>
   8     <colgroup id="colGroup"></colgroup>
   9 </table>
  10 <script>
  11     if (window.testRunner)
  12         testRunner.dumpAsText();
  13
  14     document.body.offsetTop;
  15     table.removeChild(colGroup);
  16     document.getElementById("console").innerHTML = "PASSED, the test didn't crash.";
  17 </script>