chromium/third_party/blink/web_tests/fast/css-generated-content/empty-first-letter-with-columns-crash.html

<!DOCTYPE html>
<style>
.slider { -webkit-appearance: media-volume-slider-mute-button; }
*:first-letter { pointer-events: fill; }
</style>
<body style="-webkit-column-count: 2">
    <div>
        <button></button>
        <table id="table" style="-webkit-column-span: all"></table>
    </div>
<script>
document.body.offsetHeight;
document.body.appendChild(document.createElement('div'));
document.getElementById('table').className = 'slider'

if (window.testRunner)
    testRunner.dumpAsText();

document.write("PASS. Test didn't crash.");
</script>
</body>