chromium/third_party/blink/web_tests/fast/forms/select/select-empty-optgroup-crash.html

<head>
<script>
function submitForm()
{
    if (window.testRunner)
        testRunner.dumpAsText();
    if (sessionStorage.submitted)
        return;
    sessionStorage.submitted = true;
    document.getElementById("submitform").submit();
}
</script>
</head>
<body onload="submitForm();">
<p>This tests submits on an empty select. If successful, there should not be a crash. </p>
<form id="submitform" action="">
<select name="bbb">
    <optgroup label="aaa" ></optgroup>
</select><br />
</form>
</body>