chromium/third_party/blink/web_tests/fast/css/counters/counter-function-input.html

<html> 
<head>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
</script>
<style type="text/css"> 
.test {
    content: counter(expression(-webkit-inline-box));
}
</style>
</head> 
<body> 
 This test passes if it does not crash.
</body>
</html>