Bug 1395719: Crashtest.
MozReview-Commit-ID: C6mrfNC84s5
new file mode 100644
--- /dev/null
+++ b/layout/style/crashtests/1395719.html
@@ -0,0 +1,19 @@
+<script>
+o = []
+window.onload = () => {
+ a = document.createElement("body");
+ b = document.createElementNS("http://www.w3.org/1998/Math/MathML", "math");
+ b.setAttributeNS(null, "display", "block");
+ c = document.createElementNS("http://www.w3.org/1998/Math/MathML", "munderover");
+ d = document.createTextNode("\n ");
+ c.appendChild(d);
+ c.appendChild(document.createElementNS("http://www.w3.org/1998/Math/MathML", "mo"));
+ b.appendChild(c);
+ a.appendChild(b);
+ document.documentElement.appendChild(a);
+ a.style.display = "inline";
+ setTimeout(() => {
+ d.data = "\u934F" + d.data;
+ }, 100)
+}
+</script>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@@ -207,8 +207,9 @@ load 1391577.html
load 1393189.html
load 1393580.html
load 1389645.html
load 1390726.html
load 1393791.html
load 1384232.html
load 1395725.html
load 1396041.html
+load 1395719.html