chromium/third_party/blink/web_tests/fast/table/crash-anonymous-table-layout.html

<!DOCTYPE html>
<html>
<head>
<style>
.tableAfter::after { display: table; content: attr(class); height: 1px; }
</style>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
</script>
</head>
<body>
<div class="tableAfter"></div>
<div>Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=70392">70392</a>: Multiple crashes in LayoutTable during layout</div>
<div>This test passes if it does not CRASH.</div>
</body>
</html>