Adding upstream version 1:115.7.0.upstream/1%115.7.0upstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 34 insertions, 0 deletions

diff --git a/layout/base/crashtests/538082-1.xhtml b/layout/base/crashtests/538082-1.xhtml
new file mode 100644
index 0000000000..10335617ea
--- /dev/null
+++ b/layout/base/crashtests/538082-1.xhtml
@@ -0,0 +1,34 @@
+<?xml version="1.0"?>
+<?xml-stylesheet href="chrome://global/skin" type="text/css"?>
+
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
+        xmlns:m="http://www.w3.org/1998/Math/MathML">
+
+<script type="text/javascript">
+<![CDATA[
+
+function boom()
+{
+  var e = document.getElementById("e");
+  var g = document.getElementById("maligngroup");
+
+  var M = "http://www.w3.org/1998/Math/MathML";
+  var a = document.createElementNS(M, "mfrac");
+  var b = document.createElementNS(M, "ms");
+  var c = document.createElementNS(M, "merror");
+
+  g.appendChild(c);
+
+  a.appendChild(b);
+  e.appendChild(a);
+}
+
+
+window.addEventListener("load", boom, false);
+
+]]>
+</script>
+
+<m:math><box id="e"><m:mo><m:ms/><box style="display: inline;"><box><m:maligngroup id="maligngroup"/></box></box></m:mo></box></m:math>
+
+</window>