chromium/third_party/blink/web_tests/fast/table/large-rowspan-crash.html

<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
<table><td rowspan=674227123></td></table>
<p>If the browser didn't crash, the test passed.</p>