chromium/third_party/blink/web_tests/fast/forms/dangling-form-element-crash.html

<html>
  <script src="../../resources/gc.js"></script>
  <script>
    if (window.testRunner) {
        testRunner.dumpAsText();
        testRunner.waitUntilDone();
    }

    function resetFormOwner() {
        gc();
        var form = document.createElement('form');
        form.id = 'foo';
        document.body.appendChild(form);
        document.body.innerHTML += 'PASS';
        if (window.testRunner)
            testRunner.notifyDone();
    }

    function test() {
        var div = document.createElement('div');
        var input = document.createElement('input');
        input.setAttribute('form', 'foo');
        div.appendChild(input);
        setTimeout(resetFormOwner, 0);
    }
  </script>
<body onload="test()">
<p>Checks dangling form associated elements doesn't cause crash. WebKit should not crash when this page is loaded.</p>
</body>
</html>