chromium/third_party/blink/web_tests/transforms/container-transform-crash.html

<html>
  <head>
    <script>
      if (window.testRunner)
        testRunner.dumpAsText();
    </script>
    <style>
      .container {
        position: relative;
        height: 350px;
        width: 400px;
        border: 1px solid black;
        margin: 10px;
      }
      
      .container > a {
        transform: rotate(20deg);
      }
    </style>
  </head>
<body>
    Inline with -webkit-transform that contains positioned element. This should not crash.
    <div class="container">
        <a href="#">
            <div style="height: 150px; top: 100px; width: 160px; background-color: grey; position: absolute; left: 134px;"><p>some text here</p></div>
        </a>
    </div>
</body>
</html>