| <html> | |
| <body style="display: -webkit-flex;"> | |
| <i> | |
| <div> </div><row> | |
| <source id=test style="float: right; padding-top: 238px;">A</source> | |
| </i> | |
| <div style="height: 188;"></div> | |
| <style> | |
| .class1 { | |
| width: 51667px; | |
| } | |
| </style> | |
| <script> | |
| if (window.testRunner) | |
| testRunner.dumpAsText(); | |
| document.body.offsetTop; | |
| test.setAttribute("class", "class1"); | |
| document.body.offsetTop; | |
| test.parentNode.removeChild(test); | |
| document.body.offsetTop; | |
| document.body.innerHTML = "PASS. WebKit didn't crash."; | |
| </script> | |
| </body> | |
| </html> |