chromium/third_party/blink/web_tests/svg/foreignObject/foreign-object-defs-crash.svg

<?xml version="1.0"?>
<svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" xmlns:xhtml="http://www.w3.org/1999/xhtml">
 <!-- Test for https://bugs.webkit.org/show_bug.cgi?id=87297 -->
  <defs>
    <g id="grp1">
      <foreignObject width="400" height="200">
        <xhtml:div xmlns="http://www.w3.org/1999/xhtml" style="position:absolute;"></xhtml:div>
      </foreignObject>
    </g>

    <use xlink:href="#grp2"/>
  </defs>
  <g>
    <use xlink:href="#grp1"/>
  </g>

  <g id="grp2">
    <foreignObject width="400" height="200">
      <xhtml:div xmlns="http://www.w3.org/1999/xhtml" style="position:absolute;"></xhtml:div>
    </foreignObject>
  </g>

  <linearGradient>
    <foreignObject>
      <xhtml:div xmlns="http://www.w3.org/1999/xhtml" style="position:fixed;"></xhtml:div>
    </foreignObject>
  </linearGradient>

  <text>PASS: did not crash.</text>

  <script>
    if (window.testRunner)
      testRunner.dumpAsText();
  </script>
</svg>