LayoutTests/editing/execCommand/5658933-1.html

<div id="description">This test for a crash when indenting a particular selection inside an already indented table.  It should not crash.</div>
<div id="edit" contenteditable="true">
<table border="1">
<tr><td>1</td><td id="td">2</td></tr>
<tr><td>3</td><td>4</td></tr>
</table>
<br>
</div>

<script>
if (window.testRunner)
    window.testRunner.dumpAsText();
    
edit = document.getElementById("edit");
edit.focus();
document.execCommand("SelectAll");
document.execCommand("Indent");
td = document.getElementById("td");
window.getSelection().setBaseAndExtent(td, 0, edit, edit.childNodes.length);
document.execCommand("Indent");
</script>