chromium/third_party/blink/web_tests/fast/deprecated-flexbox/inline-children-crash.html

<html>
<head>
<style>
#flexbox {
  display: -moz-box;
  display: -khtml-box;
  display: box;
  width: 100px;
  height: 100px;
  -moz-box-orient: vertical;
  -webkit-box-orient: vertical;
  box-orient: vertical;
  -webkit-line-clamp: 50%;
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
</head>
<body>
<p>Remove last block content from a flexbox, leaving only inline content. This should not crash</p>

<div id="flexbox"><div id=remove></div>text</div>
<script>
var flexbox = document.getElementById('flexbox');
flexbox.removeChild(flexbox.firstChild);
</script>
</body>