1 files changed, 16 insertions, 0 deletions
diff --git a/layout/style/crashtests/456196.html b/layout/style/crashtests/456196.html
new file mode 100644
index 0000000000..dd4b013b93
--- /dev/null
+++ b/layout/style/crashtests/456196.html
@@ -0,0 +1,16 @@
+<html>
+<head>
+<title>Crash [@ nsCSSValueList::~nsCSSValueList] with adding a lot of values in css property</title>
+</head>
+<body>
+<div style="border: 1px solid black; width: 100px; height: 100px;"></div>
+<script>
+function forceFree() {
+  var str = ' rotate(1deg)';
+  for(var i=0;i<17;i++) {str += str;}
+ document.getElementsByTagName('div')[0].style.transform = str;  
+}
+setTimeout(forceFree,100);
+</script>
+</body>
+</html>