Bug 1423216: Crashtest. r=emilio

MozReview-Commit-ID: 3NSEoFdI1XG

layout/base/crashtests/1423216.html

@@ -0,0 +1,18 @@
+<style>
+* {
+  -moz-binding: url(l)
+}
+</style>
+<script>
+o1 = document.createElement('span')
+o2 = document.createElement('span')
+document.documentElement.appendChild(o2)
+o2.appendChild(document.createElement('colgroup'))
+o3 = document.createComment('')
+o2.attachShadow({ mode: "open" }).append(o3)
+window.onload = () => {
+  o4 = document.createRange()
+  o4.setStartBefore(o3)
+  o4.insertNode(o1)
+}
+</script>

layout/base/crashtests/crashtests.list

@@ -517,6 +517,7 @@ pref(dom.webcomponents.shadowdom.enabled,true) load 1414303.html
 load 1419762.html
 load 1419802.html
 load 1420533.html
+load 1423216.html
 load 1425893.html
 load 1425959.html
 load 1428353.html