chromium/third_party/blink/web_tests/fast/dom/error-to-string-stack-overflow.html

<html>
<head>
<script src="../../resources/js-test.js"></script>
</head>
<body onload='load()'>

<script>
description("Regression test for https://bugs.webkit.org/show_bug.cgi?id=30774.  This test passes if it doesn't crash.");

// Force string conversion of error objects to throw exceptions.
Error.prototype.toString = function() { throw 0; }

// Force a stack-overflow in the onload handler.
function load() { load(); }
</script>
</body>
</html>