svgtransformlist-empty-consolidate-and-initialize-crash.html

<!DOCTYPE html>
<svg>
  <rect width="100" height="100"/>
</svg>
<script>
if (window.testRunner)
  testRunner.dumpAsText();

var transform = document.querySelector('rect').transform;
var value = transform.baseVal.consolidate();
try { transform.baseVal.initialize(value); } catch (e) {}
</script>
<p>PASS if no crash</p>

chromium/third_party/blink/web_tests/svg/dom/svgtransformlist-empty-consolidate-and-initialize-crash.html