1 files changed, 26 insertions, 0 deletions
diff --git a/dom/canvas/crashtests/1654477.html b/dom/canvas/crashtests/1654477.html
new file mode 100644
index 0000000000..5303291fe2
--- /dev/null
+++ b/dom/canvas/crashtests/1654477.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+  const canvas = document.getElementById('canvas');
+  const ctx = canvas.getContext('2d');
+
+  for (let i = 0; i < 50; i++) {
+    canvas.width = 20;
+    ctx.fillStyle = 'green';
+    ctx.fillRect(1, 1, 20, 20);
+    canvas.width = 10;
+    ctx.fillStyle = 'green';
+    ctx.fillRect(1, 1, 10, 10);
+  }
+}
+
+</script>
+</head>
+<body onload="boom();">
+<canvas id="canvas"></canvas>
+</body>
+</html>