1 files changed, 28 insertions, 0 deletions
diff --git a/layout/generic/crashtests/472587-1.xhtml b/layout/generic/crashtests/472587-1.xhtml
new file mode 100644
index 0000000000..bf9209cb20
--- /dev/null
+++ b/layout/generic/crashtests/472587-1.xhtml
@@ -0,0 +1,28 @@
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:m="http://www.w3.org/1998/Math/MathML">
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+  var m = document.getElementById("m");
+  m.parentNode.removeChild(m);
+  document.getElementById("s").appendChild(document.createTextNode("c"));
+}
+
+</script>
+</head>
+<body onload="boom();">
+
+<m:mrow>
+  <span>
+    <m:msup id="m"/>
+    <div style="-moz-column-width: 1px;">
+      <m:munderover/>
+      <m:msqrt/>
+    </div>
+  </span>
+  <span id="s"></span>
+</m:mrow>
+
+</body>
+</html>