chromium/third_party/blink/web_tests/svg/animations/invalid-keytime-number-crash.html

<!DOCTYPE html>
<svg xmlns="http://www.w3.org/2000/svg">
  <circle>
    <animateMotion calcMode="discrete" keyPoints="0.8" keyTimes="0" to="3"/>
  </circle>
</svg>
<p>PASS if Blink does not crash in debug.</p>
<script>
if (window.testRunner) {
    testRunner.waitUntilDone();
    testRunner.dumpAsText();

    window.onload = function() {
        testRunner.notifyDone();
    };
}
</script>