<script>
    if (window.testRunner)
        testRunner.dumpAsText();
</script>
<p>
    To pass this test, WebKit should not crash under GuardMalloc during render tree tear down.
</p>
<div style="-webkit-box-reflect: below; height: 100px; width: 100px; background-color: blue;">
    <div style="position: absolute; height: 50px; width: 50px; background-color: teal;"></div>
    <div style="height: 50px; width: 100px; background-color: silver;"></div>
</div>