Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/tables/mozilla/bugs/bug11321.html 

<HTML>
<BODY onload="run()">
<SCRIPT>
<!--
function run(){
        var tbl = document.body.appendChild(document.createElement("TABLE"));
                //alert("Appending TR to TABLE");
        var tr = tbl.appendChild(document.createElement("TR"));
        var tmp_td = document.createElement("TD")
        var td1 = tr.appendChild(tmp_td);   // <-- Causes Crash
        var td1_text = td1.appendChild(document.createTextNode("testing"));
}
//-->
</SCRIPT>
</BODY>
</HTML>