third_party/WebKit/LayoutTests/fast/text/vertical-spacing-crash.html - chromium/src - Git at Google

 <style>
 * { writing-mode: vertical-lr; letter-spacing: 1;}
 </style>

 <body>
 &#xfcb7;
 PASS: did not crash.
   <script>
     if (window.testRunner)
       testRunner.dumpAsText();
   </script>
 </body>
	<style>
	* { writing-mode: vertical-lr; letter-spacing: 1;}
	</style>

	<body>
	ﲷ
	PASS: did not crash.
	<script>
	if (window.testRunner)
	testRunner.dumpAsText();
	</script>
	</body>