Bug 1543154 - Added test case from fuzzer. r=dom-workers-and-storage-reviewers,edenchuang

Differential Revision: https://phabricator.services.mozilla.com/D81021

dom/indexedDB/crashtests/1543154-1.html

@@ -0,0 +1,11 @@
+<script>
+  window.addEventListener('load', () => {
+    let a = document.createElementNS('http://www.w3.org/1999/xhtml', 'frame')
+    document.documentElement.appendChild(a)
+    let b = a.contentWindow.indexedDB
+    while (document.documentElement.lastElementChild) {
+      document.documentElement.removeChild(document.documentElement.lastElementChild)
+    }
+    b.open('', { })
+  })
+</script>

dom/indexedDB/crashtests/crashtests.list

@@ -3,3 +3,4 @@ load 1499854-1.html
 load 1505821-1.html
 load 1507229-1.html
 load 1577202-1.html
+load 1543154-1.html