chromium/third_party/blink/web_tests/compositing/overflow/nested-frame-overflow-crash.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script src="../../resources/run-after-layout-and-paint.js"></script>
When an iframe's size changes, it may no longer be scrollable. There should be
no crash if this occurs in the presence of a nested iframe.<br>
<iframe id="outer_frame"
    srcdoc="<iframe srcdoc='<br><br><br><br><br><br><br><br><br><br>'>">
</iframe>
<script>
  var t = async_test();
  onload = function() {
    runAfterLayoutAndPaint(t.step_func(runTest));
  }
  function runTest() {
    outer_frame.style.width = "400px";
    outer_frame.style.height = "200px";
    t.done();
  }
</script>