1 files changed, 59 insertions, 0 deletions
diff --git a/layout/svg/crashtests/1425434-1.html b/layout/svg/crashtests/1425434-1.html
new file mode 100644
index 0000000000..cec773ca25
--- /dev/null
+++ b/layout/svg/crashtests/1425434-1.html
@@ -0,0 +1,59 @@
+<html>
+<head>
+<style>
+
+#htmlvar00002,.class4,strong:last-of-type {
+	border-image-repeat: round stretch;
+	counter-increment:c
+}
+.class6,#htmlvar00001,#htmlvar00008 {
+	height:63%;
+	grid-column:span 0 middle / middle
+}
+#htmlvar00002 {
+	overflow-y:hidden;
+	grid-column-end:0 inherit
+}
+
+</style>
+<script>
+
+function eventhandler5() {
+
+	var var00066 = document.createElement("audio");
+	try { var00066.controls = true; } catch(e) { }
+	
+	try { document.all['htmlvar00002'].appendChild(htmlvar00001); } catch(e) { }
+	try { document.all['htmlvar00002'].appendChild(var00066); } catch(e) { }
+}
+
+</script>
+</head>
+<body onload=eventhandler5()>
+
+	<shadow id="htmlvar00001" axis="PDcIvMde3=%- S^@dz" ondblclick="eventhandler1()" item="8z6h" checked="checked" type="text/x-javascript">
+		aaa
+	</shadow>
+	
+	<ul id="htmlvar00002" type="video/mp4; codecs='avc1.4D400C'" type="turbulence" type="javascript_1.0" 
+		role="complementary" dir="ltr" required="required" formnovalidate="formnovalidate" scheme="NIST" expanded="true" slot="slot2">
+		bbb
+	</ul>
+	
+	<svg id="svgvar00001" marker-end="url(#svgvar00005)" transform="translate(0, 0) scale(0.113899652038) rotate(1) translate(0, 1)" 
+		marker-mid="url(#svgvar00009)" xml:id="test-title" viewBox="0 1 78 1" click="none" glyph-orientation-vertical="-1" dominant-baseline="middle" ry="61%" k="1">
+
+		<path id="svgvar00009" d="M 0 0 L 1 0" stroke-dashoffset="inherit" onclick="eventhandler5()" stroke-linejoin="inherit" 
+			fill-rule="evenodd" onmouseover="eventhandler3()" onfocusin="eventhandler4()" pointsAtY="1" target="_self" primitiveUnits="userSpaceOnUse" horiz-adv-x="0" />
+
+		<line id="svgvar00010" x1="0px" y1="55%" x2="76%" y2="62%" transform="translate(0 100) scale(0 -1)" 
+			transform="translate(00.32347924876,0)" visibility="hidden" stroke-width="inherit" pointer-events="painted" 
+			xlink:type="simple" onrepeat="eventhandler4()" clip-path="url(#svgvar00001)" vector-effect="non-scaling-stroke" azimuth="-1">
+			ccc
+		</line>	 
+
+	</svg>
+
+<!--endhtml-->
+</body>
+</html>