LayoutTests/fast/text/international/harfbuzz-buffer-overrun.html - WebKit - Git at Google

 <html>
 <body>
 <p>&#3635;&#3648;</p>
 <script>
 // Force layout.
 document.body.offsetTop;

 if (window.testRunner)
     testRunner.dumpAsText();

 document.body.innerHTML = "PASS: does not crash";
 </script>
 </body>
 </html>
	<html>
	<body>
	<p>ำเ</p>
	<script>
	// Force layout.
	document.body.offsetTop;

	if (window.testRunner)
	testRunner.dumpAsText();

	document.body.innerHTML = "PASS: does not crash";
	</script>
	</body>
	</html>