chromium/third_party/blink/web_tests/fast/css/negative-orphans-crash.html

<html>
<head>
<style>
html {
    orphans:-988;
    widows: 435;
    -webkit-columns:1in auto ;
    width: 0;
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function onLoad()
{
    document.body.offsetLeft;
    document.body.innerHTML = 'PASS';
}
</script>
</head>
<body onload="onLoad()">
<!-- This test is for crbug.com/327725. Need some long text for reproducing crash.-->
<!-- Copied the following from W3C spec.-->
The 'orphans' property specifies the minimum number of lines in a block container that must be left at the bottom of a page. The 'widows' property specifies the minimum number of lines in a block container that must be left at the top of a page. Examples of how they are used to control page breaks are given below.
</body>
</html>