Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/css-grid-layout/crash-large-positions.html 

<!DOCTYPE html>
<title>Test using huge values for grid-column-* and grid-row-*</title>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script src="resources/grid-definitions-parsing-utils.js"></script>

<div style="display: grid;">
    <div id="item1" style="grid-column-start: 5000000000; grid-column-end: -5000000000; grid-row-start: 5000000000; grid-row-end: -5000000000;"></div>
    <div id="item2" style="grid-column: 10000000000000000000 / span 5; grid-row: span 5 / 10000000000000000000"></div>
</div>

<script>
 test(function() {
     testGridPositionDefinitionsValues(document.getElementById("item1"), "1e+07", "-1e+07", "1e+07", "-1e+07");
     testGridPositionDefinitionsValues(document.getElementById("item2"), "span 5", "1e+07", "1e+07", "span 5");
 }, "Test that setting and getting grid-column|row-start|end to huge values is properly clamped and does not make the renderer crash.");
</script>