new file mode 100644
--- /dev/null
+++ b/dom/svg/crashtests/1322286.html
@@ -0,0 +1,3 @@
+<svg>
+<polyline marker-mid='url(#a)' points='1,0 7,0 4,6'/>
+<marker id='a' mask='url()'>
\ No newline at end of file

--- a/dom/svg/crashtests/crashtests.list
+++ b/dom/svg/crashtests/crashtests.list
@@ -76,8 +76,9 @@ load 1035248-1.svg
 load 1035248-2.svg
 load 1244898-1.xhtml
 load 1250725.html
 load 1267272-1.svg
 load 1282985-1.svg
 # Disabled for now due to it taking a very long time to run - bug 1259356
 #load long-clipPath-reference-chain.svg
 load zero-size-image.svg
+load 1322286.html