1 files changed, 25 insertions, 0 deletions
diff --git a/dom/base/test/file_bug557892.html b/dom/base/test/file_bug557892.html
new file mode 100644
index 0000000000..4b91ddafdd
--- /dev/null
+++ b/dom/base/test/file_bug557892.html
@@ -0,0 +1,25 @@
+<html><head>
+<title>Crash [@ nsGenericElement::SetAttr] with classList.toggle</title>
+<script>
+var classList;
+var interval;
+function run() {
+  classList = window.frames[0].document.documentElement.classList;
+  window.frames[0].location.reload();
+  interval = setInterval(function(aClassList) {aClassList.toggle('a'); forcegc();}, 10, classList);
+  // Let the interval run for awhile and close the window after 2 seconds.
+  setTimeout(function() { clearInterval(interval); window.opener.done(); window.close(); }, 2000);
+}
+
+function forcegc(){
+  SpecialPowers.forceGC();
+  SpecialPowers.gc();
+}
+
+    </script>
+  </head>
+  <body onload="run()">
+    <iframe></iframe>
+  </body>
+</html>
+