Index: LayoutTests/fast/block/float/float-not-removed-crash2.html |
diff --git a/LayoutTests/fast/block/float/float-not-removed-crash2.html b/LayoutTests/fast/block/float/float-not-removed-crash2.html |
new file mode 100755 |
index 0000000000000000000000000000000000000000..46387cf0da86cf360d8a12b1b90a5f2b87e04e4e |
--- /dev/null |
+++ b/LayoutTests/fast/block/float/float-not-removed-crash2.html |
@@ -0,0 +1,25 @@ |
+<html> |
+<body style="display: -webkit-flex;"> |
+<i> |
+<div> </div><row> |
+<source id=test style="float: right; padding-top: 238px;">A</source> |
+</i> |
+<div style="height: 188;"></div> |
+<style> |
+.class1 { |
+ width: 51667px; |
+} |
+</style> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ |
+document.body.offsetTop; |
+test.setAttribute("class", "class1"); |
+document.body.offsetTop; |
+test.parentNode.removeChild(test); |
+document.body.offsetTop; |
+document.body.innerHTML = "PASS. WebKit didn't crash."; |
+</script> |
+</body> |
+</html> |