chromium/third_party/blink/web_tests/fast/multicol/dynamic/multicol-with-abspos-svg-with-foreignobject-with-multicol-crash.html

<!DOCTYPE html>
<p>PASS if no crash.</div>
<div id="mc1" style="-webkit-columns:2;">
    <svg style="position:absolute;">
        <foreignObject>
            <div id="inner" style="position:absolute;">
                <div id="mc2" style="-webkit-columns:2;">
                    <div style="position:absolute;"></div>
                </div>
            </div>
        </foreignObject>
    </svg>
</div>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
    document.body.offsetTop;
    document.getElementById("mc2").style.WebkitColumns = "auto";
    document.getElementById("mc1").style.WebkitColumns = "auto";
</script>