1 files changed, 18 insertions, 0 deletions
diff --git a/layout/forms/crashtests/258101-1.html b/layout/forms/crashtests/258101-1.html
new file mode 100644
index 000000000..245917cbf
--- /dev/null
+++ b/layout/forms/crashtests/258101-1.html
@@ -0,0 +1,18 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+<head>
+  <meta content="text/html; charset=ISO-8859-1"
+ http-equiv="content-type">
+  <title>Crash Testcase</title>
+  <script type="text/javascript">
+function crash()
+{
+  var inp = document.getElementById("theinp");
+  inp.type = "file";
+}
+  </script>
+</head>
+<body onload="crash();">
+<input id="theinp" type="text">
+</body>
+</html>