child-not-removed-from-parent-lineboxes-crash.html

<html>
<script src="../../resources/element_names.js"></script>
<body>
</body>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

const other_tags = [
  'datagrid', 'dcell', 'dcol', 'drow', 'child', 'layer', 'listing', 'nolayer',
  'math', 'mfrac', 'mfenced', 'msubsup', 'mrow', 'mover', 'munder', 'munderover',
  'msqrt', 'mroot', 'mi', 'mn', 'mo', 'mtext', 'msub', 'msup', 'ms', 'mglyph',
  'malignmark', 'annotation-xml', 'access', 'anchor', 'card', 'do', 'go',
  'insertedLegend', 'noop', 'onevent', 'postfield', 'prev', 'refresh', 'setvar', 'timer',
  'altGlyph', 'altGlyphDef', 'altGlyphItem', 'animate', 'animateColor', 'animateMotion',
  'animateTransform', 'set', 'circle', 'color_profile', 'cursor', 'defs', 'desc',
  'ellipse', 'feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite',
  'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight',
  'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage',
  'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting',
  'feSpotLight', 'feTile', 'feTurbulence', 'filter', 'font_face',
  'font_face_format', 'font_face_name', 'font_face_src', 'font_face_uri', 'foreignObject', 'g', 'glyph',
  'glyphRef', 'hkern', 'line', 'linearGradient', 'marker', 'mask', 'metadata', 'missing_glyph', 'mpath',
  'path', 'pattern', 'polygon', 'polyline', 'radialGradient', 'rect', 'stop', 'svg', 'switch', 'symbol',
  'text', 'textPath', 'tref', 'tspan', 'use', 'view', 'vkern'];
const tags = [...HTML5_ELEMENTS, ...HTML5_DEPRECATED_ELEMENTS, ...other_tags];

for (i = 0; i < tags.length; i++)
{
    child = document.createElement(tags[i]);
    child.style.position = 'absolute';
    document.body.appendChild(document.createTextNode('aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaad'));
    document.body.appendChild(child);
    document.body.appendChild(document.createTextNode('aaaa'));
    document.body.offsetTop;
    child.setAttribute('style', '');
    document.body.offsetTop;
    document.body.removeChild(child);
    document.body.offsetTop;
    document.body.innerHTML = "";
}

document.body.innerHTML = "PASS: does not crash";
</script>
</html>
chromium/third_party/blink/web_tests/fast/block/child-not-removed-from-parent-lineboxes-crash.html
