src/third_party/WebKit/LayoutTests/fast/block/merge-anonymous-block-remove-child-crash.html

   1 <html>\r
   2 <body onload="runTest();">\r
   3 <span style="display: run-in" id="runIn">\r
   4 </span>\r
   5 <span style="display: list-item" id="listItem">\r
   6 </span>\r
   7 <div id="result"></div>\r
   8 <script>\r
   9 if (window.testRunner)\r
  10 {\r
  11     testRunner.dumpAsText();\r
  12     testRunner.waitUntilDone();\r
  13 }\r
  14 \r
  15 function runTest()\r
  16 {\r
  17     document.body.offsetTop;\r
  18     var runIn = document.getElementById('runIn');\r
  19     var listItem = document.getElementById('listItem');\r
  20 \r
  21     runIn.appendChild(document.createElement('menu'));\r
  22     \r
  23     ol = document.createElement('ol');\r
  24     listItem.appendChild(ol);\r
  25     listItem.appendChild(document.createElement('i'));\r
  26     \r
  27     document.body.offsetTop;\r
  28     listItem.removeChild(ol);\r
  29     document.body.removeChild(runIn);\r
  30     document.body.removeChild(listItem);\r
  31 \r
  32     document.getElementById('result').innerHTML = "PASS";\r
  33     if (window.testRunner)\r
  34         testRunner.notifyDone();\r
  35 }\r
  36 </script>\r
  37 </body>\r
  38 </html>\r