third_party/WebKit/LayoutTests/transitions/transition-transform-translate-calculated-length-crash.html

   1 <!DOCTYPE html>
   2 <style>
   3     div {
   4         -webkit-transition: transform 50ms;
   5     }
   6     #div2 {
   7         transform: translate(calc(10% + 10px));
   8     }
   9 </style>
  10 <body>
  11     <p>Bug <a href="https://crbug.com/261474">http://crbug.com/261474</a>: Dereference null pointer crash in Length::decrementCalculatedRef()</p>
  12     <p>The test passes if it does not crash.</p>
  13     <div id="div1"></div>
  14     <div id="div2"></div>
  15 </body>
  16 <script>
  17     if (window.testRunner)
  18         testRunner.dumpAsText();
  19
  20     document.getElementById("div1").style.transform = "translate(calc(10% + 20px))";
  21     document.getElementById("div2").style.transform = "none";
  22 </script>