haikuwebkit/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-floats-img-inset-negative-width-crash.html

<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
<style>
    img {
        width: 10px;
        height: 10px;
        float: right;
        -webkit-shape-outside: inset(0 125% 0 0); 
    }
</style>
This test should not crash in a debug build.
<img></img>