| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <script> | |
| if (window.testRunner) | |
| testRunner.dumpAsText(); | |
| function crash() | |
| { | |
| var firstCell = document.getElementById("firstCell"); | |
| firstCell.parentNode.removeChild(firstCell); | |
| } | |
| window.addEventListener("load", crash, false); | |
| </script> | |
| </head> | |
| <body> | |
| <p> Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=70171">70171</a>: Crash in RenderTableSection::splitColumn</p> | |
| <p> This test PASSES if it does not CRASH or ASSERT.</p> | |
| <table><tr><td id="firstCell">foobar</td><td colspan="2"></td><td></td></tr></table> | |
| </body> | |
| </html> |