WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.Referenceshttps://bugs.chromium.org/p/chromium/issues/detail?id=76784http://trac.webkit.org/changeset/81648http://trac.webkit.org/changeset/81748
