chromium/third_party/blink/web_tests/editing/text-iterator/find-after-mutation.html

<!DOCTYPE html>
<html>
<head>
<script>

function runTest() {
    if (window.testRunner)
        testRunner.dumpAsText();

    document.body.offsetHeight;
    document.body.innerHTML = " ";
    window.find('a');

    document.body.innerHTML = 'PASS - WebKit did not crash';
}
</script>
</head>
<body onload="runTest()">
a
</body>
</html>