Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/multicol/remove-child-split-flow-crash.html 

<!DOCTYPE html>
<html>
Test passes if it does not crash.
<style>
.class1 { -webkit-column-span: all; }
.class2 { -webkit-column-width: 1px; }
.class3 { display: inline-block; }
.class4 { section; -webkit-column-span: all; }
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function crash() {
    i1 = document.createElement('i');
    document.documentElement.appendChild(i1);
    i2 = document.createElement('i');
    i1.appendChild(i2);
    div1 = document.createElement('div');
    div2 = document.createElement('div');
    div2.setAttribute('class', 'class3');
    i3 = document.createElement('i');
    div3 = document.createElement('div');
    div3.setAttribute('class', 'class1');
    div4 = document.createElement('div');
    div4.setAttribute('class', 'class4');
    i2.appendChild(div2);
    div2.appendChild(div1);
    div1.appendChild(div4);
    document.documentElement.offsetTop;
    div1.setAttribute('class', 'class2');
    div4.appendChild(div3);
    document.documentElement.offsetTop;
    i3.appendChild(div3);
}
window.onload = crash;
</script>
</html>