LayoutTests/fast/block/float/float-with-shape-outside-crash.html

<style>
q { 
    float: left;
}

div { 
    float: left;
    width: 1400px;
    height: 100px;
    -webkit-shape-outside: filter(url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA4MCAxMjUiIHN0cm9rZT0iI2QzNiI+CiAgPHBhdGggZD0iTTQwLDczdjUwIiBzdHJva2Utd2lkdGg9IjExIi8+CiAgPHBhdGggZD0iTTE3LDk4bDQ3LDAiIHN0cm9rZS13aWR0aD0iOCIvPgogIDxjaXJjbGUgcj0iMzMiIGN4PSI0MCIgY3k9IjQwIiBmaWxsPSJub25lIiBzdHJva2Utd2lkdGg9IjEyIi8+Cjwvc3ZnPgo=), hue-rotate()); 
}
</style><span>PASS if no crash or ASSERT</span><q>
<div></div></q><script>
document.getSelection().selectAllChildren(document.body);
if (window.testRunner)
    testRunner.dumpAsText();
</script>