From e4123123a92e73416a6a7cd953bddb37b002ba39 Mon Sep 17 00:00:00 2001
From: Bob Clary <bclary@bclary.com>
Date: Fri, 24 Apr 2009 10:08:22 -0700
Subject: [PATCH] bug 398088 - crash test by Jesse Ruderman.

---
 content/base/crashtests/398088-1.xul    | 23 +++++++++++++++++++++++
 content/base/crashtests/crashtests.list |  1 +
 2 files changed, 24 insertions(+)
 create mode 100644 content/base/crashtests/398088-1.xul

diff --git a/content/base/crashtests/398088-1.xul b/content/base/crashtests/398088-1.xul
new file mode 100644
index 00000000000..6548a11be97
--- /dev/null
+++ b/content/base/crashtests/398088-1.xul
@@ -0,0 +1,23 @@
+<window onload="boom();" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<script>
+
+function boom()
+{
+  var p = document.getElementById("p");
+  
+  document.addEventListener("DOMAttrModified", removeP, true); 
+  
+  p.removeAttribute("mode");
+  
+  function removeP()
+  {
+    document.documentElement.removeChild(p);
+  }
+}
+
+</script>
+
+<progressmeter id="p" mode="determined" />
+
+</window>
diff --git a/content/base/crashtests/crashtests.list b/content/base/crashtests/crashtests.list
index 8d4e5bd3dc7..8c4fdc60351 100644
--- a/content/base/crashtests/crashtests.list
+++ b/content/base/crashtests/crashtests.list
@@ -36,6 +36,7 @@ load 387460-1.html
 load 395469-1.xhtml
 load 395469-2.xhtml
 load 399712-1.html
+load 398088-1.xul
 load 400763-1.html
 load 407818.html
 load 410860-1.xml