Add crashtest

js/src/xpconnect/crashtests/418139-1.svg

@@ -0,0 +1,22 @@
+<svg xmlns="http://www.w3.org/2000/svg" 
+     xmlns:xlink="http://www.w3.org/1999/xlink" 
+     xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" 
+     onload="boom();">
+     
+<script type="text/javascript">
+
+function boom()
+{
+  document.getElementById("b").style.position = "absolute";
+  document.getElementById("a").style.color = "green";
+}
+
+</script>
+
+<defs>
+  <g id="a"><xul:listbox/></g>
+</defs>
+
+<g id="b"><use xlink:href="#a"/></g>
+
+</svg>

js/src/xpconnect/crashtests/crashtests.list

@@ -4,3 +4,4 @@ load 346258-1.html
 load 346512-1.xhtml
 load 382133-1.html
 load 394810-1.html
+load 418139-1.svg