LayoutTests/fast/flexbox/crash-resolved-main-size-zero.html - WebKit - Git at Google

 <!DOCTYPE html>
 <style>
 * {
     flex-direction: column-reverse;
     display: flex;
     height: 0%;
 }
 </style>
 <script>
 if (window.testRunner)
     testRunner.dumpAsText();
 </script>
 <body>
 <p>This test PASSES if it does not CRASH on Debug builds.</p>
 </body>
	<!DOCTYPE html>
	<style>
	* {
	flex-direction: column-reverse;
	display: flex;
	height: 0%;
	}
	</style>
	<script>
	if (window.testRunner)
	testRunner.dumpAsText();
	</script>
	<body>
	<p>This test PASSES if it does not CRASH on Debug builds.</p>
	</body>