chromium/third_party/blink/web_tests/svg/custom/use-href-update-crash.svg

<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg">
  <!-- Test for https://bugs.webkit.org/show_bug.cgi?id=104004 -->
  <use id="use" xlink:href="foo.svg#foo"/>
  <text>PASS: did not crash.</text>

  <script src="../../resources/js-test.js"></script>
  <script>
    var use = document.getElementById('use');
    use.setAttribute('xlink:href', 'bar.svg#bar');
    use.parentNode.removeChild(use);
    use = null;
    gc();

    if (window.testRunner)
      testRunner.dumpAsText();
  </script>
</svg>