style-element-process-crash.html | Explore in Territory

<!DOCTYPE html>
<html>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

function crash() {
    document.body.innerHTML = "PASS. WebKit didn't crash.";
    testRunner.notifyDone();
}
</script>
<object>
<input autofocus onfocus="crash()">
</object>
<style>
.abc::first-child { 
	font: 2147483647 small-caps 3507521020px sans-serif;
}
</style>
</html>

chromium/third_party/blink/web_tests/fast/css/style-element-process-crash.html