chromium/third_party/blink/web_tests/fast/table/fixed-table-layout-large-colspan-crash.html

<html>
<head>
<style type="text/css">
table {
    table-layout: fixed;
    width: 15px;
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function finish() {
    document.getElementById("result").innerHTML = "PASS";
}
</script>
</head>
<body onload="finish()">
<p>Tests that large colspan in a fixed table layout does not result in crash.</p>
<div id=result></div>
<table>
<td colspan="1923138113">
</td>
</table>
</body>
</html>