Index: LayoutTests/fast/table/split-anonymous-crash.html |
diff --git a/LayoutTests/fast/table/split-anonymous-crash.html b/LayoutTests/fast/table/split-anonymous-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..5210aa72b8aaf851a345662d13409c02d60a1d30 |
--- /dev/null |
+++ b/LayoutTests/fast/table/split-anonymous-crash.html |
@@ -0,0 +1,18 @@ |
+<!DOCTYPE html> |
+<style> |
+ #fl:first-letter { color:red; } |
+</style> |
+<script> |
+ if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ window.onload = function() { |
+ document.body.offsetTop; |
+ elm2.style.display = 'table-row'; |
+ } |
+</script> |
+<p>Setting style on a cell whose row hasn't been laid out yet should not crash.</p> |
+<div id="fl" style="display:table-row-group; padding-top:1vw;"> |
+ <div>elm1</div> |
+ <div id="elm2" style="display:none;">elm2</div> |
+ <div style="display:table-row-group;">nested row group</div> |
+</div> |