LayoutTests/fast/flexbox/crash-flexbox-no-layout-child.html - WebKit - Git at Google

 <script>
 if (window.layoutTestController)
     layoutTestController.dumpAsText();

 function boom() {
   setTimeout('document.querySelector("progress").setAttribute("style", "overflow: scroll; border-style: dotted;");', 10);
 }
 window.onload = boom;
 </script>
 <body>
   <span style="display: -webkit-inline-box;">
     <span style="position: fixed; visibility: collapse;">
       <span style="visibility: visible;">
         <progress></progress>
       </span>
     </span>
   </span>
   <div>Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=64842">64842</a>: RenderDeprecatedFlexibleBox does not call its children's layout method</div>
   <div>This test passes if it does not CRASH.</div>
 </body>
	<script>
	if (window.layoutTestController)
	layoutTestController.dumpAsText();

	function boom() {
	setTimeout('document.querySelector("progress").setAttribute("style", "overflow: scroll; border-style: dotted;");', 10);
	}
	window.onload = boom;
	</script>
	<body>
	<span style="display: -webkit-inline-box;">
	<span style="position: fixed; visibility: collapse;">
	<span style="visibility: visible;">
	<progress></progress>
	</span>
	</span>
	</span>
	<div>Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=64842">64842</a>: RenderDeprecatedFlexibleBox does not call its children's layout method</div>
	<div>This test passes if it does not CRASH.</div>
	</body>