chromium/third_party/blink/web_tests/svg/clip-path/clip-path-foreign-object-crash.html

<!doctype HTML>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<style>
  * { clip-path: url(); }
</style>
This test passes if it does not crash.
<svg>
  <foreignObject>
    <div>
    </div>
  </foreignObject>
</svg>
<script>
test(function() {});
</script>