Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/shapes/shape-outside-floats/shape-outside-no-image-crash.html 

<body id=theBody>
<style>
.bogus-shape-outside:not(h1) { shape-outside: url(#no-such-anchor); }
</style>
<script>
if (window.testRunner) {
  testRunner.waitUntilDone();
  testRunner.dumpAsText();
}

function initCF() { 
  setTimeout("tCFcrash()", 0);
}

document.addEventListener("DOMContentLoaded", initCF, false);

function tCFcrash() {
  theBody.classList.add("bogus-shape-outside");
  rr3706 = document.createRange();
  window.getSelection().addRange(rr3706);
  theBody.style.display = "table-row";
  theBody.setAttribute("class", "c11");
  if (window.testRunner)
    testRunner.notifyDone();
}
</script>
This test should not crash.

<!--
Based on https://cluster-fuzz.appspot.com/testcase?key=4709517736542208
-->