LayoutTests/fast/html/process-end-tag-for-inbody-crash.html

<rt>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
	
document.body.innerHTML = "PASS";
</script>
</rt>