Adding test

layout/reftests/bugs/220165-1-ref.svg

@@ -0,0 +1,19 @@
+<?xml version="1.0"?>
+
+<svg xmlns="http://www.w3.org/2000/svg" 
+     xmlns:html="http://www.w3.org/1999/xhtml" height="500" 
+     xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+  <foreignObject x="200" y="180" width="100" height="50" >
+    <html:button id="x">New text</html:button>
+  </foreignObject>
+
+  <g transform="rotate(10) translate(-100) scale(0.8)">
+    <polygon style="fill:red; fill-opacity:0.5;"
+	  points="350, 75 379,161 469,161 397,215
+	  423,301 350,250 277,301 303,215
+                     231,161 321,161" />
+	
+  </g>
+
+</svg>

layout/reftests/bugs/220165-1.svg

@@ -0,0 +1,21 @@
+<?xml version="1.0"?>
+
+<svg xmlns="http://www.w3.org/2000/svg" 
+     xmlns:html="http://www.w3.org/1999/xhtml" height="500" 
+     xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
+     onload="document.documentElement.getBoundingClientRect();
+	     document.getElementById('x').textContent = 'New text'">
+
+  <foreignObject x="200" y="180" width="100" height="50" >
+    <html:button id="x">Old long long long text</html:button>
+  </foreignObject>
+
+  <g transform="rotate(10) translate(-100) scale(0.8)">
+    <polygon style="fill:red; fill-opacity:0.5;"
+	  points="350, 75 379,161 469,161 397,215
+	  423,301 350,250 277,301 303,215
+                     231,161 321,161" />
+	
+  </g>
+
+</svg>

layout/reftests/bugs/reftest.list

@@ -142,6 +142,7 @@ fails == 25888-3r.html 25888-3r-ref.html # bug 25888
 == 214077-1a.html 214077-1-ref.html
 == 214077-1b.html 214077-1-ref.html
 == 218473-1.html 218473-1-ref.html
+== 220165-1.svg 220165-1-ref.svg
 == 223809-1.html 223809-1-ref.html
 == 228856-1.html 228856-1-ref.html
 == 228856-2.html 228856-2-ref.html

layout/svg/crashtests/220165-1.svg

@@ -0,0 +1,21 @@
+<?xml version="1.0"?>
+
+<svg xmlns="http://www.w3.org/2000/svg" 
+     xmlns:html="http://www.w3.org/1999/xhtml" height="500" 
+     xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
+     onload="document.documentElement.getBoundingClientRect();
+	     document.getElementById('x').textContent = 'New text'">
+
+  <foreignObject x="200" y="180" width="100" height="50" >
+    <html:button id="x">Old long long long text</html:button>
+  </foreignObject>
+
+  <g transform="rotate(10) translate(-100) scale(0.8)">
+    <polygon style="fill:red; fill-opacity:0.5;"
+	  points="350, 75 379,161 469,161 397,215
+	  423,301 350,250 277,301 303,215
+                     231,161 321,161" />
+	
+  </g>
+
+</svg>

layout/svg/crashtests/crashtests.list

@@ -1,3 +1,4 @@
+load 220165-1.svg
 load 307314-1.svg
 load 308615-1.svg
 load 308917-1.svg