chromium/third_party/blink/web_tests/svg/animations/smil-animation-max-attribute-zero-crash.html

<?xml version="1.0" encoding="UTF-8"?>
<svg version="1.1" xmlns="http://www.w3.org/2000/svg">
  <rect>
    <animate attributeName="fill" begin="-1; indefinite" max="0" fill="freeze" values="#000;#fff"/>
  </rect>
  <text>PASS: not crashing in debug.</text>
  <script>
    if (window.testRunner)
      testRunner.dumpAsText();
  </script>
</svg>