chromium/third_party/blink/web_tests/compositing/gestures/gesture-tapHighlight-inline-block-crash.html

<!DOCTYPE html>
<link rel="stylesheet" href="resources/link-highlight-style.css">
<a href="" id="targetLink" width="320" height="240" ><div>Shoudn't crash</div></a>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}
var targetLink = document.querySelector('#targetLink');
var clientRect = targetLink.getBoundingClientRect();
x = (clientRect.left + clientRect.right) / 2;
y = (clientRect.top + clientRect.bottom) / 2;
if (window.eventSender) {
    eventSender.gestureShowPress(x, y);
    window.setTimeout(function() { testRunner.notifyDone(); }, 0);
} else {
    debug("This test requires DumpRenderTree.");
}
</script>