Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/css/css-tables/crashtests/dynamic_col_width_crash.html 

<!DOCTYPE html>
<table rules="cols">
    <caption>caption</caption>
    <col id="target" style="width:50%"/>
    <tbody>
      <tr></tr>
    </tbody>
  </table>
<script>
document.body.offsetTop;
document.getElementById('target').style.width = 'auto';
</script>