third_party/WebKit/LayoutTests/editing/execCommand/dispatch-text-event-crash.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<hr id="el0" contenteditable="true" />
<output id="el10"></output>
<form id="form"/>
<div id="log"></div>
<script>
test(function(){
  el0.appendChild(document.createComment("text"));

  document.designMode = 'on';
  document.execCommand('selectall');
  document.execCommand('bold');
  document.designMode = 'off';
  enterEvent = document.createEvent('TextEvent');
  enterEvent.initTextEvent('textInput', true, true, document.defaultView, '\\n');
  form.dispatchEvent(enterEvent);
});
</script>