Bug 1186768 patch 2 - Crashtest. r=heycam

David Baron confirmed locally that this fails with a fatal assertion without patch 1 and passes with patch 1. --HG-- extra : commitid : I8JJwlxIugj
2015-11-06 11:26:50 +08:00 · 2015-11-06 11:26:50 +08:00 · 9b054b046b
--- a/layout/style/crashtests/1186768-1.xhtml
+++ b/layout/style/crashtests/1186768-1.xhtml
@ -0,0 +1,10 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+    <body>
+        <mfrac xmlns="http://www.w3.org/1998/Math/MathML">
+            <mi>
+                <div xmlns="http://www.w3.org/1999/xhtml" style="font-family: monospace; font-size: 1.17em;"></div>
+            </mi>
+            <mi/>
+        </mfrac>
+    </body>
+</html>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@ -125,6 +125,7 @@ load 1161366-1.html
 load 1163446-1.html
 load 1164813-1.html
 load 1167782-1.html
+load 1186768-1.xhtml
 load 1200568-1.html
 load 1206105-1.html
 load border-image-visited-link.html