Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/multicol/span/runin-continuation-crash.html 

<!DOCTYPE html>
<html>
<body>
<style>
.div1 { -webkit-column-span: all; }
.divContainer::after { content: ''; }
.divContainer { -webkit-column-width: 1px; }
.runin { display: run-in; }
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

document.body.offsetTop;
div1 = document.createElement('div');
div1.setAttribute('class', 'div1');
div2 = document.createElement('div');
div3 = document.createElement('div');

divContainer = document.createElement('div');
divContainer.setAttribute('class', 'divContainer');
document.documentElement.appendChild(divContainer);

div2.appendChild(div1);
divContainer.appendChild(div2);
divContainer.appendChild(div3);
document.body.offsetTop;
div2.setAttribute('class', 'runin');
document.body.offsetTop;
document.body.innerHTML = "PASS";
</script>
</body>
</html>