LayoutTests/css3/masking/shared-clip-path-reference-crash.html

<style>
  div, svg, clipPath { clip-path: url(#clipPath); }
</style>
<div></div>
<svg>
  <clipPath id="clipPath">
</svg>
<script>
  if (window.testRunner)
    testRunner.dumpAsText();
  document.write("Test passes if it does not crash.");
</script>