third_party/WebKit/LayoutTests/editing/inserting/insert-character-in-overflow-crash.html

<div id="container">
<div contenteditable="true" id="sample" style="overflow: hidden;"></div>
</div>
<script>
var elem = document.getElementById('sample');
var selection = window.getSelection();
selection.collapse(elem, 0);
document.execCommand('InsertText', false, String.fromCharCode(0x0E1B));
document.execCommand('InsertText', false, String.fromCharCode(0x0E44));
if (window.testRunner) {
    testRunner.dumpAsText();
    document.body.textContent = 'PASS; NOT CRASHED';
}
</script>