chromium/third_party/blink/web_tests/fast/parser/residual-style-close-ref-clone.html

<p>
    Test for <i><a href="rdar://problem/7341364">rdar://problem/7341364</a>
    Crash at HTMLParser::popOneBlockCommon() after handling misnested residual
    style tags</i>.
</p>
<p>
    No crash means PASS.
</p>
<b> <!-- residual style element -->
    <h1 id="target">
        <span> <!-- can't put h2 diretly in h1 since it will get bumped out -->
            <h2>
                </b> <!-- closing residual style across blocks -->
<script type="text/javascript">
    if (window.testRunner)
        testRunner.dumpAsText();

    var target = document.getElementById("target");
    target.innerHTML = "";
</script>