diff --git a/content/svg/content/src/crashtests/428841-1.svg b/content/svg/content/src/crashtests/428841-1.svg
new file mode 100644
index 00000000000..77234aba9df
--- /dev/null
+++ b/content/svg/content/src/crashtests/428841-1.svg
@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" onload="boom();">
+     
+<script type="text/javascript">
+
+function boom()
+{
+  var path = document.createElementNS("http://www.w3.org/2000/svg", "path"); 
+  path.getPathSegAtLength(1); 
+}
+
+</script>
+
+</svg>
diff --git a/content/svg/content/src/crashtests/crashtests.list b/content/svg/content/src/crashtests/crashtests.list
index 40cea7a3e54..847fd259c5e 100644
--- a/content/svg/content/src/crashtests/crashtests.list
+++ b/content/svg/content/src/crashtests/crashtests.list
@@ -33,3 +33,4 @@ load 410659-2.svg
 load 410659-3.svg
 load 412104-1.svg
 load 414188-1.svg
+load 428841-1.svg