Adding upstream version 1:115.7.0.upstream/1%115.7.0upstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 16 insertions, 0 deletions

diff --git a/layout/svg/crashtests/1424031.html b/layout/svg/crashtests/1424031.html
new file mode 100644
index 0000000000..447e01cb15
--- /dev/null
+++ b/layout/svg/crashtests/1424031.html
@@ -0,0 +1,16 @@
+<script>
+function eh1() {
+  a.setAttribute("points", "1");
+}
+function eh2() {
+  a.addEventListener("DOMSubtreeModified", eh1);
+  a.points.getItem(1).y = 0;
+}
+function go() {
+  window.requestIdleCallback(eh2, {timeout: 62});
+}
+</script>
+<style onload="go()"></style>
+<svg>
+<polygon id="a" points="0 0 58 1 -1 1">
+