shape-outside-negative-height-crash.html

<!DOCTYPE html>
<style>
    .container {
        width: 10px;
        font: 18px Ahem;
    }
    .float {
        float: left;
    }
    .crasher {
        /* 1x1 px transparent png */
        shape-outside: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR4nGP6zwAAAgcBApocMXEAAAAASUVORK5CYII=);
        margin-top: -19px;
    }
</style>
<body>
    <p>This test passes if it doesn't crash.</p>
    <div class="container">
        <div class="float">a a</div>
        <div class="float crasher">a</div>
        a
    </div>
</body>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>

chromium/third_party/blink/web_tests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html