chromium/third_party/blink/web_tests/fast/forms/defer-updateFromElement.html

<p>
    Test for <i><a href="rdar://problem/7458272">rdar://problem/7458272</a>
    REGRESSION (r50470) Reproducible ASSERT in
    LayoutEmbeddedContent::UpdateGeometry()</i>.
</p>
<iframe></iframe>
<textarea id="target">Test did not run</textarea>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();

    var target = document.getElementById("target");
    target.offsetTop;
    target.selectionEnd = 2;
    target.style.height = "100px";
    target.value = "";

    target.value = "Finished";
</script>