| <html> |
| <body> |
| <!-- [bug 93993] https://bugs.webkit.org/show_bug.cgi?id=98993 --> |
| <!-- WebCore::RenderBlock::determineStartPosition crash --> |
| <!-- If this test passes, no crash. We can see "PASS". --> |
| <foo style="white-space:pre-wrap;"> |
| <sup> |
| <foo id="root"> |
| a<foo style="position:fixed;"></foo><foo><label id="node"> |
| a</label> |
| </foo> |
| </foo> |
| </sup> |
| </foo> |
| </body> |
| <script type="text/javascript"> |
| if (window.testRunner) |
| testRunner.dumpAsText(); |
| document.body.offsetTop; |
| root.appendChild(node); |
| document.body.offsetTop; |
| document.body.innerHTML = 'PASS'; |
| </script> |
| </html> |
| |
