blob: e01dbb5626ec974d98ae070930b905289301d3c2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
<!DOCTYPE html>
<html>
Test passes if it does not crash.
<style>
.class1 { -webkit-column-span: all; }
.class2 { -webkit-column-width: 1px; }
.class3 { display: inline-block; }
.class4 { section; -webkit-column-span: all; }
</style>
<script>
if (window.testRunner)
testRunner.dumpAsText();
function crash() {
i1 = document.createElement('i');
document.documentElement.appendChild(i1);
i2 = document.createElement('i');
i1.appendChild(i2);
div1 = document.createElement('div');
div2 = document.createElement('div');
div2.setAttribute('class', 'class3');
i3 = document.createElement('i');
div3 = document.createElement('div');
div3.setAttribute('class', 'class1');
div4 = document.createElement('div');
div4.setAttribute('class', 'class4');
i2.appendChild(div2);
div2.appendChild(div1);
div1.appendChild(div4);
document.documentElement.offsetTop;
div1.setAttribute('class', 'class2');
div4.appendChild(div3);
document.documentElement.offsetTop;
i3.appendChild(div3);
}
window.onload = crash;
</script>
</html>
|
