Bug 1061027 - crashtest.

layout/mathml/crashtests/1061027.html

@@ -0,0 +1,12 @@
+<style>
+.c1 { transform-style: preserve-3d; display: table-row-group;</style><script>
+var docElement = document.documentElement;
+function init() {
+test1 = document.createElementNS("http://www.w3.org/1999/xhtml", "defs");
+test1.setAttribute("class", "c1");
+docElement.appendChild(test1);
+test2 = document.createElementNS("http://www.w3.org/1998/Math/MathML", "msub");
+test1.appendChild(test2);
+}
+document.addEventListener("DOMContentLoaded", init, false);
+</script>

layout/mathml/crashtests/crashtests.list

@@ -63,3 +63,4 @@ test-pref(layout.css.sticky.enabled,true) load 973322-1.xhtml
 load 848725-1.html
 load 848725-2.html
 load 1028521-1.xhtml
+load 1061027.html