chromium/third_party/blink/web_tests/svg/dom/parent-view-layout-crash.html

<!DOCTYPE html>
<html>
Test passes if it does not crash.
<style></style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function runTest()
{
    document.styleSheets[0].insertRule("font {}", 0);
}
</script>
<object data="resources/svg-font-face.svg"></object>
<object style="content:counter(item)" data="resources/svg-font-face.svg" onload="runTest()"></object>
</script>
</html>