From 5d405e8420b230fbf4a86cf85582deebb9d40c76 Mon Sep 17 00:00:00 2001
From: Martijn Wargers <martijn.martijn@gmail.com>
Date: Sat, 23 Feb 2013 11:38:14 +0100
Subject: [PATCH] Bug 422276 - Crash test.

---
 layout/base/crashtests/422276.html     | 18 ++++++++++++++++++
 layout/base/crashtests/crashtests.list |  1 +
 2 files changed, 19 insertions(+)
 create mode 100644 layout/base/crashtests/422276.html
diff --git a/layout/base/crashtests/422276.html b/layout/base/crashtests/422276.html
new file mode 100644
index 000000000000..6d2a89b74107
--- /dev/null
+++ b/layout/base/crashtests/422276.html
@@ -0,0 +1,18 @@
+<html>
+<head>
+</head>
+<body>
+<div style="overflow: scroll;">
+  <div>
+    <q>
+      <span style="display: -moz-box;"></span>
+    </q>
+  </div>
+  <q></q>
+</div>
+
+<style>
+body *+* {quotes: "quote" "quote" !important;}
+</style>
+</body>
+</html>
\ No newline at end of file
diff --git a/layout/base/crashtests/crashtests.list b/layout/base/crashtests/crashtests.list
index 9f7fe7e5bf95..74635785ff62 100644
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@@ -225,6 +225,7 @@ load 420219-1.html
 load 420651-1.xhtml
 load 421203-1.xul
 load 421432.html
+load 422276.html
 load 423107-1.xhtml
 load 425981-1.html
 load 428138-1.html
