third_party/WebKit/LayoutTests/fast/block/merge-anonymous-block-remove-child-crash.html

   1 <html>
   2 <body onload="runTest();">
   3 <span style="display: run-in" id="runIn">
   4 </span>
   5 <span style="display: list-item" id="listItem">
   6 </span>
   7 <div id="result"></div>
   8 <script>
   9 if (window.testRunner)
  10 {
  11     testRunner.dumpAsText();
  12     testRunner.waitUntilDone();
  13 }
  14
  15 function runTest()
  16 {
  17     document.body.offsetTop;
  18     var runIn = document.getElementById('runIn');
  19     var listItem = document.getElementById('listItem');
  20
  21     runIn.appendChild(document.createElement('menu'));
  22
  23     ol = document.createElement('ol');
  24     listItem.appendChild(ol);
  25     listItem.appendChild(document.createElement('i'));
  26
  27     document.body.offsetTop;
  28     listItem.removeChild(ol);
  29     document.body.removeChild(runIn);
  30     document.body.removeChild(listItem);
  31
  32     document.getElementById('result').innerHTML = "PASS";
  33     if (window.testRunner)
  34         testRunner.notifyDone();
  35 }
  36 </script>
  37 </body>
  38 </html>