Bug 1640028 - Add a crashtest. r=dholbert

Fixed by bug 1640275 and bug 1343948.

Differential Revision: https://phabricator.services.mozilla.com/D78161

layout/generic/crashtests/1640028.html

@@ -0,0 +1,31 @@
+<style>
+* {
+  column-width: 15em;
+  display: flex;
+}
+#a {
+  writing-mode: tb;
+  display: inline-grid;
+  font-size-adjust: 5;
+}
+</style>
+<script>
+window.onload = () => {
+  b.align = "ABSMIDDLE"
+  c.scrollBy(0.6938726108254376,0.19469668495287307)
+  d.insertCell(1)
+}
+</script>
+<data id="a">
+<details style="width: 0pt">
+<summary style="max-width: 0vh">
+<table>
+<tr id="d">
+<th></th>
+<col id="b">
+</table>
+aaaaaa
+aaaaaaaaaaaaa
+</details>
+aaaaaaaaaaaaaaaaaaaa
+<fePointLight id="c">

layout/generic/crashtests/crashtests.list

@@ -768,4 +768,5 @@ load 1629575-2.html
 load 1630385.html
 load 1633434.html
 load 1633828.html
+load 1640028.html
 load 1640275.html