chromium/third_party/blink/web_tests/accessibility/accessibility-node-appendChild-crash.html

<body>
PASS if no crash.
<script>
if (window.testRunner)
  testRunner.dumpAsText();
new AccessibleNode().appendChild(new AccessibleNode()); 
</script>
</body>