palemoon-dev/platform/dom/xslt/crashtests/528488.xml

<?xml version="1.0"?>
<?xml-stylesheet type="text/xml" href="#bug"?>
<!DOCTYPE doc [
<!ATTLIST xsl:transform
  id	ID	#REQUIRED>
]>
<doc>
  <xsl:transform 
    xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
    xmlns:exslstrings="http://exslt.org/strings"
    version="2.0"
    id="bug">
    <xsl:variable name="v0" select="$v0" /> 
    <xsl:template name="t2" match="/">
      <xsl:param name="p0" select="exslstrings:tokenize('1234','foobar')" />
      <xsl:copy-of select="round($v0)" /> 
    </xsl:template>
  </xsl:transform>
</doc>