chromium/third_party/blink/web_tests/fast/css/counters/element-removal-crash.xhtml

<span xmlns="http://www.w3.org/1999/xhtml">
<span/>
<style>
    span 
    {
        counter-increment: counter;
    }
    span:before
    {
        content: counter(counter);
    }
</style>
<script>
    if (window.testRunner) 
    {
        testRunner.dumpAsText();
        testRunner.waitUntilDone();
    }

    function runTest()
    {
        document.documentElement.textContent = "PASS";

        if (window.testRunner)
            testRunner.notifyDone();
    }

    setTimeout('runTest()', 0);
</script>
<span/>