23 lines
571 B
HTML
23 lines
571 B
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<script>
|
|
if (window.testRunner)
|
|
testRunner.dumpAsText();
|
|
|
|
function crash()
|
|
{
|
|
var firstCell = document.getElementById("firstCell");
|
|
firstCell.parentNode.removeChild(firstCell);
|
|
}
|
|
|
|
window.addEventListener("load", crash, false);
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<p> Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=70171">70171</a>: Crash in RenderTableSection::splitColumn</p>
|
|
<p> This test PASSES if it does not CRASH or ASSERT.</p>
|
|
<table><tr><td id="firstCell">foobar</td><td colspan="2"></td><td></td></tr></table>
|
|
</body>
|
|
</html>
|