LayoutTests/fast/multicol/fragflow-gains-new-in-flow-descendant-crash.html

<style>
#outer {
    -webkit-columns: 2;
}
#inner {
    position: absolute;
}
</style><div id=outer><div id=inner><span>Tests multicol when a fragment flow gains a new in-flow descendant. The test passes if WebKit doesn't crash or hit an assertion.</span><iframe></iframe></div></div><script>
    if (window.testRunner)
        testRunner.dumpAsText();
    document.body.offsetHeight;
    inner.style.position = "static";
</script>