chromium/third_party/blink/web_tests/fast/multicol/span/generated-child-split-flow-crash.html

<!DOCTYPE html>
<html style="font-family: Ahem; -webkit-font-smoothing: none;">
<style>
    #div1 { 
        -webkit-column-count: 2;
    }
    #span1:after 
    {
        display: block;
        content: counter(c);
        color: green;
        -webkit-column-span: all;
    }
</style>
<div id="div1">
A<span id="span1" style="color: blue">B</span>C
</div>
<div style="font-family: initial;">PASS if no crash</div>
<script>
function runTest()
{
    if (window.testRunner)
        testRunner.dumpAsText();

    span1 = document.getElementById('span1');
    span1.style.display = 'block';
    document.body.offsetTop;
    document.body.style.zoom = 2;
}

window.onload = runTest;
</script>
</html>