Bug 1286458 - Add crashtest. r=lsalzman
---
dom/canvas/crashtests/1286458-1.html | 20 ++++++++++++++++++++
dom/canvas/crashtests/crashtests.list | 1 +
2 files changed, 21 insertions(+)
create mode 100644 dom/canvas/crashtests/1286458-1.html
new file mode 100644
--- /dev/null
+++ b/dom/canvas/crashtests/1286458-1.html
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+ var canvas = document.createElement('canvas');
+ var ctx = canvas.getContext('2d');
+ var path=new Path2D();
+ path.bezierCurveTo(436,Number.MIN_VALUE,620,Number.MAX_SAFE_INTEGER,1,83);
+ ctx.setTransform(1,Number.MAX_SAFE_INTEGER,1,0,1,146.0);
+ ctx.scale(16777218,55);
+ ctx.stroke(path);
+}
+
+</script>
+</head>
+<body onload="boom();"></body>
+</html>
--- a/dom/canvas/crashtests/crashtests.list
+++ b/dom/canvas/crashtests/crashtests.list
@@ -29,9 +29,10 @@ skip-if(azureCairo) load 1229983-1.html
load 1229932-1.html
load 1244850-1.html
load 1246775-1.html
load 1284356-1.html
load 1284578-1.html
skip-if(d2d) load 1287515-1.html
load 1287652-1.html
load 1288872-1.html
+load 1286458-1.html
