chromium/third_party/blink/web_tests/tables/mozilla/bugs/bug68912.html

<html>
<head>
<title>Crash TR.cells = null</title>
<script language="javascript">

function crashme()
{
        var elm = document.createElement('tr');

        elm.cells = null;
        alert('No Crash');
}


</script>
</head>
<body>

<p>
This test case creates a TR element then tries to assign to the cells property
</p>
<p>
Crash
<button onclick="crashme()">TR.cells = null</button> 
</p>

</body>
</html>