LayoutTests/fast/css/scrollbar-image-crash.html

<style>
::-webkit-scrollbar {
    height: 0.8em;
}
::-webkit-scrollbar-thumb {
    background: #666 -webkit-gradient(linear, left top, right top, from(rgba(255,255,255,0.5)), color-stop(0.5, rgba(255,255,255,0.1)), color-stop(0.5, rgba(0,0,0,0)), to(rgba(0,0,0,0.01)));
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
function test()
{
    document.body.offsetTop; // trigger layout and style calculation
    var styles = document.getElementsByTagName("style");
    for (var i = 0; i < styles.length; ++i)
        document.head.appendChild(styles[i]);
    document.body.innerText = "PASS: Test passed if it did not crash.";
}
document.addEventListener('DOMContentLoaded', test);
</script>
<textarea>a
b
</textarea>