chromium/third_party/blink/web_tests/fast/events/touch/touch-hit-test-crash.html

<!DOCTYPE html>
<html style="display: none">
<head>
<script>
function test()
{
    if (window.testRunner)
        testRunner.dumpAsText();

    if (window.eventSender) {
        eventSender.clearTouchPoints();
        eventSender.addTouchPoint(100, 100);
        eventSender.touchStart();
    }
}
</script>
</head>
<body onload="test()">
This test should not crash.
</body>
</html>