chromium/third_party/blink/manual_tests/input-type-file-autocomplete-frame-1.html

<html>
<body>
<p><b>BUG ID:</b> <a href="<rdar://problem/4532113> REGRESSION (NativeTextField): Crash occurs after modifying field then reloading page -[FormDelegate frameLayoutHasChanged:]">4532113</a> REGRESSION (NativeTextField): Crash occurs after modifying field then reloading page -[FormDelegate frameLayoutHasChanged:]</p>

<p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> 
<ol>
<li> enable Safari's auto fill
<li> type something in the input field, and press enter to register it with autofill
<li> clear the field and type part of the same string you did previously
<li> without ever removing focus from the input field, select the suggestion autofill suggests
<li> refresh the page or go to a bookmark (don't remove focus from the input field)
</ol>
</p>

<p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> 
no crash. 
</p>

<p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b>  
Crash in -[FormDelegate frameLayoutHasChanged:]
</p>
</body>
</html>