float-not-removed-crash2.html | Explore in Territory

<html>
<body style="display: -webkit-flex;">
<i>
<div> </div><row>
<source id=test style="float: right; padding-top: 238px;">A</source>
</i> 
<div style="height: 188;"></div>
<style>
.class1 { 
    width: 51667px;
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

document.body.offsetTop;
test.setAttribute("class", "class1");
document.body.offsetTop;
test.parentNode.removeChild(test);
document.body.offsetTop;
document.body.innerHTML = "PASS. WebKit didn't crash.";
</script>
</body>
</html>

chromium/third_party/blink/web_tests/fast/block/float/float-not-removed-crash2.html