third_party/blink/web_tests/images/mask-box-image-crash.html

<script>
if (window.testRunner)
    testRunner.dumpAsTextWithPixelResults();
</script>
<fieldset style="margin-inline-end: 99999px;
                 -webkit-mask-box-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAE\
                 IAAABCAQAAAADLLz1FAAAACXZwQWcAAABCAAAAQgCVDTvpAAAAFElEQVQoz2P4DwUHGEZZo6xBwQI\
                 ANWY/j0PofaAAAAAASUVORK5CYII=') 10000% 10000 9999999999%;">
</fieldset>
<div style="position: absolute;
            top: 0px;
            left: 0px;
            width: 100px;
            height: 100px;
            z-index: 1;
            background-color: white;"></div>