table-subtree-layout-crash.html | Explore in Territory

<!DOCTYPE html>
<html>
<head>
<style>

table {
  height: 10px;
  width: 10px;
  overflow: hidden;
}

</style>
<script src="resources/autosizingTest.js"></script>
</head>
<body>
Test for crbug.com/375439: this test passes if it does not crash.<br>

<table>
  <tr>
    <td>
      <div id="div">hello</div>
    </td>
  </tr>
</table>

<script>
if (window.testRunner)
    testRunner.waitUntilDone();

window.requestAnimationFrame(function () {
    var node = document.getElementById('div');
    node.parentNode.removeChild(node);
    var forceLayout = document.body.offsetTop;

    if (window.testRunner) {
        testRunner.dumpAsText();
        testRunner.notifyDone();
    }
});

</script>
</body>
</html>

chromium/third_party/blink/web_tests/fast/text-autosizing/table-subtree-layout-crash.html