chromium/third_party/blink/web_tests/external/wpt/css/css-inline/float-becomes-inflow-crash.html

<!DOCTYPE html>
<link rel="author" title="Morten Stenshorne" href="mailto:[email protected]">
<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1331189">
<div id="elm" style="float:left;"></div>
x
<script>
  document.body.offsetTop;
  elm.style.cssFloat = "none";
  getComputedStyle(elm).cssFloat;
  elm.style.display = "none";
</script>