event-listener-map-rehash-crash.html

<html>
<head>
<script src="../../resources/js-test.js"></script>
<script>
    function stub() {}

    document.addEventListener("DOMContentLoaded", function()
    {
        for (var i = 0; i < 50; ++i)
            document.addEventListener("boom" + i, stub, false);
    }, false);

    document.addEventListener("DOMContentLoaded", stub);
</script>
</head>
<body>
<script>
    description("Ensures that rehashing of events map doesn't leave us with a dangling event list reference.");
    testPassed("Did not crash.");
</script>
</body>
</html>

chromium/third_party/blink/web_tests/fast/events/event-listener-map-rehash-crash.html