1 files changed, 23 insertions, 0 deletions
diff --git a/gfx/tests/crashtests/394246-2.html b/gfx/tests/crashtests/394246-2.html
new file mode 100644
index 0000000000..e5fe8c1754
--- /dev/null
+++ b/gfx/tests/crashtests/394246-2.html
@@ -0,0 +1,23 @@
+<html class="reftest-wait">
+<head>
+<script>
+function boom()
+{
+  var div = document.getElementById("div");
+  div.innerHTML = div.innerHTML.slice(1);
+  setTimeout(c, 30);
+}
+
+function c()
+{
+  div.innerHTML = div.innerHTML.slice(1);
+  document.documentElement.removeAttribute("class");
+}
+</script>
+</head>
+<body onload="boom();">
+
+<div id="div">t
+&#769;</div>
+
+</body></html>
+\ No newline at end of file