From ecaf5041ae49db7a7a77ee84c0aff83fd431f327 Mon Sep 17 00:00:00 2001
From: Daniel Holbert <dholbert@cs.stanford.edu>
Date: Fri, 2 Nov 2012 15:23:16 -0700
Subject: [PATCH] Bug 612736: add crashtests for this WORKSFORME bug.
 r=longsonr

---
 layout/svg/crashtests/612736-1.svg    | 19 +++++++++++++++++++
 layout/svg/crashtests/612736-2.svg    |  8 ++++++++
 layout/svg/crashtests/crashtests.list |  3 ++-
 3 files changed, 29 insertions(+), 1 deletion(-)
 create mode 100644 layout/svg/crashtests/612736-1.svg
 create mode 100644 layout/svg/crashtests/612736-2.svg

diff --git a/layout/svg/crashtests/612736-1.svg b/layout/svg/crashtests/612736-1.svg
new file mode 100644
index 00000000000..cb3044efd09
--- /dev/null
+++ b/layout/svg/crashtests/612736-1.svg
@@ -0,0 +1,19 @@
+<svg xmlns="http://www.w3.org/2000/svg"
+     xmlns:xlink="http://www.w3.org/1999/xlink"
+     class="reftest-wait">
+  <path id="path"/>
+  <text>
+    <textPath xlink:href="#path">f</textPath>
+    <textPath xlink:href="#path">f</textPath>
+  </text>
+
+  <script>
+  function boom()
+  {
+    var path = document.getElementById("path");
+    path.parentNode.removeChild(path);
+    document.documentElement.removeAttribute("class");
+  }
+  window.addEventListener("load", boom, false);
+  </script>
+</svg>
diff --git a/layout/svg/crashtests/612736-2.svg b/layout/svg/crashtests/612736-2.svg
new file mode 100644
index 00000000000..30b8245a9f8
--- /dev/null
+++ b/layout/svg/crashtests/612736-2.svg
@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg"
+     xmlns:xlink="http://www.w3.org/1999/xlink">
+  <path id="path" d="M0 100 h50" stroke="black"/>
+  <text>
+    <textPath xlink:href="#path">abc</textPath>
+    <textPath xlink:href="#path">def</textPath>
+  </text>
+</svg>
diff --git a/layout/svg/crashtests/crashtests.list b/layout/svg/crashtests/crashtests.list
index ab0ce8141c0..eddd887846c 100644
--- a/layout/svg/crashtests/crashtests.list
+++ b/layout/svg/crashtests/crashtests.list
@@ -106,6 +106,8 @@ load 610594-1.html
 load 610954-1.html
 load 612662-1.svg
 load 612662-2.svg
+load 612736-1.svg
+load 612736-2.svg
 load 614367-1.svg
 load 620034-1.html
 load 621598-1.svg
@@ -136,4 +138,3 @@ load 780963-1.html
 load 757751-1.svg
 load 790072.svg
 load 791826-1.svg
-