third_party/WebKit/LayoutTests/fast/css/end-of-buffer-crash.html

<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>

<style>tenbytes {</style>

<p>This test tickles a subtle off-by-one bug in how the CSS lexer handles end
of buffer conditions.  The contents of the style tag satisfy (length mod 8 = 2)
and contain an unclosed curly brace.  We pass if we don't crash.</p>

<p>PASS</p>