chromium/third_party/blink/web_tests/fast/xsl/xslt-transform-to-fragment-crash.html

<!DOCTYPE html>
<html>
Test passes if it does not crash.
<script>
if (window.testRunner)
    testRunner.dumpAsText();

var style = '\
    <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0"> \
      <xsl:variable name="test"></xsl:variable> \
      <xsl:variable name="test"></xsl:variable> \
    </xsl:stylesheet>';
var xslp = new XSLTProcessor();
var foo = new DOMParser().parseFromString(style, "text/xml");
xslp.importStylesheet(foo);
xslp.transformToFragment(foo, document);
xslp.transformToFragment(foo, document);
</script>
</html>