LayoutTests/http/tests/misc/font-face-in-multiple-segmented-faces.html

<style>
    @font-face {
        font-family: "test";
        font-weight: normal;
        src: url(resources/acid3/font.ttf);
    }

    @font-face {
        font-family: "test";
        font-weight: bold;
        src: local(Times);
    }
</style>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
</script>
<p style="font-family: test; font-weight: bold;">Test for
<a href="https://bugs.webkit.org/show_bug.cgi?id=22454">https://bugs.webkit.org/show_bug.cgi?id=22454</a>
REGRESSION (3.2-TOT): Crash below FontFallbackList::fontDataAt on jacobian.org</p>
<input style="font-family: test" value="PASS">
<script>
    document.body.offsetLeft;
</script>