chromium/third_party/blink/web_tests/fast/dom/nodesFromRect/nodesFromRect-continuation-crash.html

<html>
<head>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

window.onload = function() {
    if (!window.internals)
        alert("This test requires window.internals");
    var nodes = internals.nodesFromRect(document, 100, 100, 20, 20, 20, 20, false, false);
    alert("PASS: This test did not trigger an ASSERT");
};
</script>
</head>
<body style="background:gray;">
  <article style="width:100px;position:relative;">
    <a id="anchor" href="#">
      <div style="position: relative;">
        <img alt="Test image" style="max-width: 100px;" height="100" width="100">
      </div>
    </a>
  </article>
</body>
</html>