merge after backout

content/smil/crashtests/483584-1.svg

@@ -1,8 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg"
-     xmlns:xlink="http://www.w3.org/1999/xlink">
-  <g id="s">
-    <circle/>
-    <animateTransform attributeName="transform"/>
-  </g>
-  <use xlink:href="#s"/>
-</svg>

content/smil/crashtests/crashtests.list

@@ -1,5 +1,3 @@
-load 483584-1.svg
-load 483584-2.svg
 load 523188-1.svg
 load 525099-1.svg
 load 526536-1.svg

content/svg/content/src/nsSVGElement.cpp

@@ -1235,6 +1235,10 @@ nsSVGElement::DidAnimateLength(PRUint8 aAttrEnum)
 void
 nsSVGElement::GetAnimatedLengthValues(float *aFirst, ...)
 {
+#ifdef MOZ_SMIL
+  FlushAnimations();
+#endif
+
   LengthAttributesInfo info = GetLengthInfo();
 
   NS_ASSERTION(info.mLengthCount > 0,