LayoutTests/fast/inline/inline-content-with-intrusive-float-partial-layout-crash.html

<style>
details {
  text-transform: capitalize;
}
div {
  width: 0px;
}
img {
  float: right;
  width: 100px;
  height: 100px;
}
</style><div><details open="true"><img id=img>
PASS if no crash</details></div><script>
if (window.testRunner)
  testRunner.dumpAsText();
document.body.offsetHeight;
img.style.borderWidth = "1px"; 
document.body.offsetHeight;
img.style.borderWidth = "2px"; 
</script>