Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/wpt_internal/css/css-writing-modes/text-combine-upright-crash.html 

<!DOCTYPE html>
<div id="target" style="writing-mode: vertical-rl; text-combine-upright: all; font-family: Hiragino Mincho Pro">123</div>
<script>
window.getSelection().selectAllChildren(document.getElementById('target'));
gc();
</script>