Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/multicol/span/list-multi-column-crash.html 

<!DOCTYPE html>
<html>
<body>
Test passes if it does not crash.
<style>
.columns
{
	-webkit-column-count: 2;
	-webkit-column-span: all;
}
.list
{
	display: list-item;
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

list = document.createElement('p');
list.setAttribute('class', 'list');
listChild = document.createElement('hr');
list.appendChild(listChild);
list.appendChild(document.createTextNode('Text.'));
outerColumns = document.createElement('div');
outerColumns.appendChild(list);
document.body.appendChild(outerColumns);
outerColumns.setAttribute('class', 'columns');
document.body.offsetTop;

innerColumns = document.createElement('div');
innerColumns.setAttribute('class', 'columns');
listChild.appendChild(innerColumns);
document.body.offsetTop;

document.body.removeChild(outerColumns);
</script>
</body>
</html>