Bug 1526569 [wpt PR 15243] - [LayoutNG] Crash bug fix, a=testonly

Automatic update from web-platform-tests [LayoutNG] Crash bug fix LayoutInline can be anonymous LayoutObject->Node() is null for anonymous layout objects. Do not dereferece Node() if null. Bug: 928224 Change-Id: I1afe05928faef0d7da52826f4cc4c3753ddddb64 Reviewed-on: https://chromium-review.googlesource.com/c/1452506 Reviewed-by: Christian Biesinger <cbiesinger@chromium.org> Commit-Queue: Aleks Totic <atotic@chromium.org> Cr-Commit-Position: refs/heads/master@{#628948} -- wpt-commits: 907716fdf200fd80322faa7f50fe665a08fc9add wpt-pr: 15243
2019-02-12 14:40:50 +00:00 · 2019-02-12 14:40:50 +00:00 · 707b55000f
--- a/testing/web-platform/tests/css/css-position/position-absolute-crash-chrome-001.html
+++ b/testing/web-platform/tests/css/css-position/position-absolute-crash-chrome-001.html
@ -0,0 +1,28 @@
+<!doctype html>
+<html>
+<head>
+  <title>Chrome crash with inline </title>
+  <link rel="help" href="https://www.w3.org/TR/css-position-3/#def-cb">
+  <link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=928224">
+  <script src="/resources/testharness.js"></script>
+  <script src="/resources/testharnessreport.js"></script>
+  <script>test(()=>{})</script>
+<style>
+  a {
+    position: relative;
+  }
+  a:before {
+    content: "foo";
+    position: absolute;
+    background: green;
+  }
+</style>
+</head>
+<body>
+  <div>
+    <li>
+      <a href="dummy">success if does not crash</a>
+    </li>
+  </div>
+</body>
+</html>