third_party/WebKit/LayoutTests/fast/table/crash-splitColumn-3.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5 if (window.testRunner)
   6     testRunner.dumpAsText();
   7
   8 function crash()
   9 {
  10     var firstCell = document.getElementById("firstCell");
  11     firstCell.parentNode.removeChild(firstCell);
  12 }
  13
  14 window.addEventListener("load", crash, false);
  15 </script>
  16 </head>
  17 <body>
  18 <p> Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=70171">70171</a>: Crash in LayoutTableSection::splitColumn</p>
  19 <p> This test PASSES if it does not CRASH or ASSERT.</p>
  20 <table><tr><td id="firstCell">foobar</td><td colspan="2"></td><td></td></tr></table>
  21 </body>
  22 </html>