chromium/third_party/blink/web_tests/fast/gradients/crash-on-tr.html

<head>
<style type="text/css">
.f {
    background:-webkit-gradient(linear, left top, left bottom, from(#E7E7E7), to(#CFCFCF));
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
</head>

This test should not crash (or ASSERT).<p>

There should also be a table cell with a gradient below.<p>

<table
<tr class="f">
<td>Gradient</td>
</tr>
</table>