chromium/third_party/blink/web_tests/fast/text-autosizing/empty-document-crash.html

<!DOCTYPE html>
<html>
<head>
<meta name="viewport" content="width=800">
<style>
  body {
    width: 800px;
    margin: 0;
    overflow-y: hidden;
  }
</style>

<script src="resources/autosizingTest.js"></script>
</head>
<body>

Test for crbug.com/348458: this test passes if it does not crash.
<script>
  // Create an iframe with no content (html, body) except for the document.
  // Note: splitting the end script tag is requried to prevent closing the script we are in.
  document.body.innerHTML += "<iframe src='data:text/html,<body><script>document.removeChild(document.body.parentElement)</s" + "cript>'></body></iframe>";
  var forceLayout = document.getElementsByTagName('iframe')[0].offsetWidth;
  document.write("PASS");
  if (window.testRunner)
    testRunner.dumpAsText();
</script>

</body>
</html>