| Index: LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html
 | 
| diff --git a/LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html b/LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html
 | 
| new file mode 100644
 | 
| index 0000000000000000000000000000000000000000..a6426428667c7b237d3ffc0cbcb2ce1039e59a15
 | 
| --- /dev/null
 | 
| +++ b/LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html
 | 
| @@ -0,0 +1,25 @@
 | 
| +<!DOCTYPE html>
 | 
| +<html>
 | 
| +<head>
 | 
| +    <script type="text/javascript">
 | 
| +        if (window.testRunner)
 | 
| +            testRunner.dumpAsText();
 | 
| +    </script>
 | 
| +    <style>
 | 
| +        td, h4, h6 {padding-top:25000pt;}
 | 
| +    </style>
 | 
| +</head>
 | 
| +<body>
 | 
| +    <h2>Test for chromium bug : <a href="https://code.google.com/p/chromium/issues/detail?id=334652">334652</a>. ASSERTION FAILED: !remainder in WebCore::RenderTableSection::distributeExtraRowSpanHeightToAutoRows.</h3>
 | 
| +    <h3>For this test to PASS, it should not crash.</h4>
 | 
| +    <table border="1">
 | 
| +        <tr>
 | 
| +            <td>r0c0</td>
 | 
| +            <td rowspan="2">
 | 
| +                <h6>r0c1</h6>
 | 
| +                <h4> rowspan=2</h4>
 | 
| +            </td>
 | 
| +        </tr>
 | 
| +    </table>
 | 
| +</body>
 | 
| +</html>
 | 
| 
 |