From becf2921bb92fcc25bc4cddb6d38eee819e1a59b Mon Sep 17 00:00:00 2001
From: Bernd <bernd_mozilla@gmx.de>
Date: Sat, 26 Jan 2013 21:28:56 +0100
Subject: [PATCH] Bug 371290 - crashtest

---
 layout/tables/crashtests/371290.html     | 32 ++++++++++++++++++++++++
 layout/tables/crashtests/crashtests.list |  1 +
 2 files changed, 33 insertions(+)
 create mode 100644 layout/tables/crashtests/371290.html
diff --git a/layout/tables/crashtests/371290.html b/layout/tables/crashtests/371290.html
new file mode 100644
index 000000000000..86eb8913e093
--- /dev/null
+++ b/layout/tables/crashtests/371290.html
@@ -0,0 +1,32 @@
+<html>
+<head>
+<title>BC crash</title>
+<script>
+function doit() {
+  var C = document.getElementById('C'); 
+  var newNode = document.createElement('td'); 
+  newNode.setAttribute('id', 'D'); 
+  C.insertBefore(newNode, document.getElementById('B')); 
+  var D = document.getElementById('D'); 
+  D.parentNode.removeChild(D);  
+  var A = document.getElementById('A'); 
+  A.parentNode.removeChild(A);  
+}
+</script>
+</head>
+
+
+<body onload="doit()">
+<table style="border-collapse: collapse">
+  <tbody>
+   <tr id="C">
+     <th id="B"></th>
+   </tr>
+   <tr>
+    <td id="A" colspan="2"></th>
+   </tr>
+   <tbody><tr><th></th></tr></tbody>
+
+</table>
+</body>
+</html>
diff --git a/layout/tables/crashtests/crashtests.list b/layout/tables/crashtests/crashtests.list
index 706c3b060e66..f519376fce7e 100644
--- a/layout/tables/crashtests/crashtests.list
+++ b/layout/tables/crashtests/crashtests.list
@@ -66,6 +66,7 @@ load 370360-1.html
 load 370713-1.html
 load 370876-1.html
 load 370897-1.html
+load 371290.html
 load 373611-1.html
 load 373946-1.html
 load 374356-1.html
