chromium/third_party/blink/web_tests/editing/selection/firstRect-crash.html

<body>
<p>This test passes if we don't crash.</p>
<h2 id='h2' class="sidebar-title">Trending:</h2>
<p id='p'>test</p>
<script>
function runTest()
{
    if (window.testRunner)
        testRunner.dumpAsText();

    window.getSelection().setBaseAndExtent(
        document.getElementById("h2").firstChild, 9,
        document.getElementById("p"), 0);
    document.getElementById("p").style.display = "none";

    document.getElementById("h2").innerText = "PASSED";
}
runTest();
</script>
</body>