LayoutTests/fast/flexbox/intrinsic-width-crash.html - WebKit - Git at Google

 <!DOCTYPE html>
 <script>
 if (window.testRunner)
     testRunner.dumpAsText();
 </script>
 <style>
   p, body {
     display: flex;
   }
   p {
     writing-mode: vertical-rl;
     width: intrinsic;
   }
 </style>
 <body>
 <p>Passes if it doesn't crash!</p>
 </body>
	<!DOCTYPE html>
	<script>
	if (window.testRunner)
	testRunner.dumpAsText();
	</script>
	<style>
	p, body {
	display: flex;
	}
	p {
	writing-mode: vertical-rl;
	width: intrinsic;
	}
	</style>
	<body>
	<p>Passes if it doesn't crash!</p>
	</body>