Fix scroll anchoring crash from removing an anonymous block anchor

third_party/WebKit/Source/core/layout/ScrollAnchor.cpp

Index: third_party/WebKit/Source/core/layout/ScrollAnchor.cpp
diff --git a/third_party/WebKit/Source/core/layout/ScrollAnchor.cpp b/third_party/WebKit/Source/core/layout/ScrollAnchor.cpp
index 63b69a4cdaa949962a24bf21fab031e9f84fe681..90b4dea933da2e59ab17ff3cf358419d7a5dfb91 100644
--- a/third_party/WebKit/Source/core/layout/ScrollAnchor.cpp
+++ b/third_party/WebKit/Source/core/layout/ScrollAnchor.cpp
@@ -119,6 +119,11 @@ ScrollAnchor::ExamineResult ScrollAnchor::examine(const LayoutObject* candidate)
     if (candidate->isLayoutInline())
         return ExamineResult(Continue);
 
+    // Anonymous blocks are not in the DOM tree and it may be hard for
+    // developers to reason about the anchor node.
+    if (candidate->isAnonymous())
+        return ExamineResult(Continue);
+
     if (!candidate->isText() && !candidate->isBox())
         return ExamineResult(Skip);