1 files changed, 30 insertions, 0 deletions
diff --git a/gfx/tests/crashtests/385289-1.xhtml b/gfx/tests/crashtests/385289-1.xhtml
new file mode 100644
index 000000000..666756c01
--- /dev/null
+++ b/gfx/tests/crashtests/385289-1.xhtml
@@ -0,0 +1,30 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<script>
+function boom()
+{
+  var mss = document.getElementById("mss");
+
+  var j = document.createTextNode("j");
+  var comb = document.createTextNode("\u0302");
+
+  mss.appendChild(j);
+  mss.appendChild(comb);
+}
+</script>
+</head>
+
+<body onload="boom()">
+
+<div>
+  <math xmlns="http://www.w3.org/1998/Math/MathML" display="block">
+    <msub id="mss"> 
+      <mi>v</mi> 
+      <mn>1</mn> 
+    </msub> 
+  </math>
+</div>        
+
+</body>
+
+</html>