chromium/third_party/blink/manual_tests/inspector/returnEvent-crash.html

<script>
    function test2() {
        var y = 6;
        y += 3;
        return y;
    }

    function test() {
        var x = 5;
        eval("test2()");
        x += 6;
        return x;
    }
</script>
<p>Test for <a href="https://bugs.webkit.org/show_bug.cgi?id=19038">Bug 19038: Crash in JavaScriptDebugServer::returnEvent when inspecting an attached Inspector</a>.</p>
<p>To test, open and attach the Inspector's debugger, then click the button below. If you don't crash, you have passed the test.</p>
<button onclick="test()">click me</button>