chromium/third_party/blink/web_tests/svg/custom/large-image-pattern-crash.html

<!DOCTYPE html>
<html>
  <body>
    <svg xmlns="http://www.w3.org/2000/svg">
      <pattern id="pattern" width="100" height="100">
        <image height="40000" width="40000" xlink:href="data:image/svg+xml,
	    <svg xmlns='http://www.w3.org/2000/svg'></svg>
        "/>
      </pattern>
      <rect fill="url(#pattern)" height="300" width="400"/>
      <text>PASS: did not crash.</text>

      <script>
        if (window.testRunner)
          testRunner.dumpAsText();
      </script>
    </svg>
  </body>
</html>