LayoutTests/fast/inline/inline-flex-on-replaced-crash.html

PASS if no crash or ASSERT
<div><img style="width: 100px; height: 100px; display: inline-flex; background-color: green"></div>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
</script>