chromium/third_party/blink/web_tests/fast/css/counter-crash.html

<html>
    <script>
        window.onload = function()
        {
            if (window.testRunner)
                testRunner.dumpAsText();

            document.getElementById('content').innerHTML = "PASS: rendered counter nodes without crashing.";
        }
    </script>
    <iframe src='resources/counter-crash-frame-src.html'>
    </iframe>
    <div id='content'>
    FAIL
    </div>
</html>