LayoutTests/fast/ruby/ruby-base-merge-block-children-crash-2.html

<summary>
    <ruby>
        <rt></rt>
        <h1>
            <object align="right"></object>
            <img>
            <div style="padding:1920000000px;"></div>
        </h1>
    </ruby>
    <object></object>
</summary>

<script>
    document.designMode = "on";
    document.execCommand("SelectAll");
    document.execCommand("Italic");
    if (window.testRunner)
        testRunner.dumpAsText();
</script>


<div>
    <a href="https://bugs.webkit.org/show_bug.cgi?id=127515">WebKit bug #127515</a>. This test must be run under Guard Malloc. It passes if it does not crash.
</div>