chromium/third_party/blink/web_tests/fast/css/border-image-fill-crash.html

<style>
* { border-image: fill; }
</style>
This test passes if it does not CRASH.
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>