LayoutTests/css3/flexbox/crash-removing-out-of-flow-child.html

<!DOCTYPE html>
<html>
<head>
<link href="resources/flexbox.css" rel="stylesheet">
</head>
<body>

<p>This test passes if it doesn't crash.</p>

<div id="outer" class="inline-flexbox"><div class="inline-flexbox"><div id="inner" style="position: absolute">absolute</div></div></div>

<script>
if (window.testRunner)
    testRunner.dumpAsText();

var outer = document.getElementById("outer");
var inner = document.getElementById("inner");

// Force layout.
outer.offsetHeight;

outer.firstChild.removeChild(inner);
</script>

<div>This test passes if it doesn't crash.</div>
</body>
</html>