chromium/third_party/blink/web_tests/fast/parser/residual-style-close-across-removed-block.html

<body>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
</script>
<p>
    Test for <i><a href="rdar://problem/6255862">rdar://problem/6255862</a> domfuzz: null deref in WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks(WebCore::HTMLStackElem*)</i>.
</p>
<p>
    This tests closing a residual style tag out of order after a block child has been removed from the tree. No crash means PASS.
</p>
<font>
    <div id = "outerblock">
        <div>
            <script>
               document.getElementById("outerblock").textContent = "";
            </script>
</font>