crash-img-child-when-fallback-content-added.html

<!DOCTYPE html>
<script src="../resources/testharness.js"></script>
<script src="../resources/testharnessreport.js"></script>
<body>
<script>
  test(() => {
    const img = document.createElement("img");
    img.setAttribute("alt", "PASS if no crash.");
    document.body.appendChild(img);
    const span = document.createElement("span");
    img.appendChild(span);
    document.body.offsetTop;
  }, "Removing an img child from the flat tree because alt rendering is added should not crash.");
</script>

chromium/third_party/blink/web_tests/images/crash-img-child-when-fallback-content-added.html