chromium/third_party/blink/manual_tests/dom-manipulation-on-resize.html

<html>
<head><style>
body { overflow: hidden; }
</style>
<script>
window.onresize = function() {
    var tbody = document.createElement("TBODY")

    var m = (document.getElementsByTagName("TABLE"))[0]
    if(m.hasChildNodes()) m.removeChild(m.lastChild)

    var tr = tbody.appendChild(document.createElement("TR"))

    m.appendChild(tbody)
}
</script>
</head>
<body onload="setTimeout('window.resizeTo(500,500)', 0)">
<table></table>
<p>
<b>BUG ID: <a href="http://bugs.webkit.org/show_bug.cgi?id=8739">Bugzilla bug 8739</a></b>
Crash in RenderTableSection::paint due to manipulating DOM on resize
</p>
<p id="success" style="background-color:palegreen; padding:3px;">
><b>TEST PASS:</b> You got here without crashing, which means test PASS. It is normal for the
window to have resized.
</p>
</body></html>