Index: LayoutTests/fast/flexbox/order-iterator-crash.html |
diff --git a/LayoutTests/fast/flexbox/order-iterator-crash.html b/LayoutTests/fast/flexbox/order-iterator-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..2b519664c713755e8095fec850ad1bfa52ecdf58 |
--- /dev/null |
+++ b/LayoutTests/fast/flexbox/order-iterator-crash.html |
@@ -0,0 +1,12 @@ |
+<div>This test has passed if it doesn't crash under ASAN.</div> |
+<style> |
+* { display: flex; } |
+</style> |
+<table><td id="crashy"></td></table> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ |
+crashy.offsetLeft; |
+crashy.parentNode.removeChild(crashy); |
+</script> |