chromium/third_party/blink/web_tests/accessibility/first-letter-text-transform-causes-crash.html

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<style>
       dt:first-letter{text-transform:uppercase;}
</style>
<script src="../resources/js-test.js"></script>
<script src="../resources/accessibility-helper.js"></script>
</head>
<body>

<div id="container">
  <dt>dt</dt>
</div>
<p id="description"></p>
<div id="console"></div>

<script>
    description("First letter text transform causes assert and bad type cast. This can cause a crash.");

    // Trigger a layout operation to create the two LayoutTextFragment instances.
    document.body.children[0].offsetWidth;

    if (window.accessibilityController) {
        // Build up full accessibility tree.
        document.body.focus();
        buildAccessibilityTree(accessibilityController.accessibleElementById("container"), 0);
    }

</script>

</body>
</html>