chromium/third_party/blink/web_tests/fast/dom/canvas-fallback-focus-crash.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<canvas>
  <object id="f"></object>
</canvas>
<script>
test(function() {
  f.focus();
}, "crbug.com/587263 focusing plugin object in canvas fallback may dereference nullptr");
</script>