crash-remove-scrollbar-no-scrollable-area.html

<!DOCTYPE html>
<style>
.c2 { overflow: scroll; background: aqua; }
.c6 { -webkit-column-count: 2;}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function boom() {
    var select = document.createElement('select');
    select.setAttribute('size', '65536');
    select.setAttribute('class', 'c2');
    document.documentElement.appendChild(select);
    document.body.offsetTop;
    select.setAttribute('class', 'c6');
    document.body.offsetTop;
}
window.onload = boom;
</script>
<div>This test checks that Layer doesn't crash because it is missing a ScrollableArea.</div>
<div>This test has PASSED if it didn't CRASH.</div>

chromium/third_party/blink/web_tests/fast/layers/crash-remove-scrollbar-no-scrollable-area.html