change-text-node-data-ellipsis-crash.html

<!DOCTYPE html>
<meta charset="utf-8">
<style>
#test {
  width: 100px;
  height: 50px;
  overflow: hidden;
  text-overflow: ellipsis;
  line-height: 1;
  white-space: nowrap;
  contain: layout size;
}
</style>
<p>The test passes if you see the word "PASS" (without any ellipsis) below and it doesn't crash in debug.</p>
<div id="test">
  Hellowooooorld!
</div>
<script>
  if (window.testRunner)
    testRunner.dumpAsText();

  document.body.offsetLeft;
  test.childNodes[0].data = "PASS";
</script>

chromium/third_party/blink/web_tests/fast/css/containment/change-text-node-data-ellipsis-crash.html