Bug 824300 - Part 2. Crash test.
MozReview-Commit-ID: DwGv68izJ1
new file mode 100644
--- /dev/null
+++ b/layout/base/crashtests/824300.html
@@ -0,0 +1,13 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<body>
+
+ <span style="filter: url(#f);">
+ <div style="transform: matrix(2, 1, 0, 2, 50, 50);"></div>
+ </span>
+
+ <svg xmlns="http://www.w3.org/2000/svg">
+ <filter id="f"/>
+ </svg>
+
+</body>
+</html>
\ No newline at end of file
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@@ -427,16 +427,17 @@ load 795646.html
skip load 802902.html # bug 901752
load 806056-1.html
load 806056-2.html
load 812665.html
load 813372-1.html
load 817219.html
load 818454.html
load 822865.html
+load 824300.html
asserts-if(stylo,1) load 824862.html # bug 1324704
load 826163.html
load 833604-1.html
load 835056.html
load 836990-1.html
load 840480.html
load 842114.html
load 847242.html