diff --git a/mozilla/layout/tables/crashtests/404301-1.xhtml b/mozilla/layout/tables/crashtests/404301-1.xhtml
new file mode 100644
index 00000000000..56b57330858
--- /dev/null
+++ b/mozilla/layout/tables/crashtests/404301-1.xhtml
@@ -0,0 +1,21 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<script>
+
+function boom()
+{
+  var b = document.getElementById('b');
+  b.style.counterIncrement = 'chicken';
+  document.body.offsetHeight;
+  b.style.counterIncrement = '';
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<col id="a" span="2"></col><col id="b"></col>
+
+</body>
+</html>
diff --git a/mozilla/layout/tables/crashtests/crashtests.list b/mozilla/layout/tables/crashtests/crashtests.list
index d7e4984efce..61b67e80ae1 100644
--- a/mozilla/layout/tables/crashtests/crashtests.list
+++ b/mozilla/layout/tables/crashtests/crashtests.list
@@ -31,3 +31,4 @@ load 398157-1.xhtml
 load 399209-1.xhtml
 load 403249-1.html
 load 403579-1.html
+load 404301-1.xhtml
diff --git a/mozilla/layout/xul/base/src/crashtests/311457-1.html b/mozilla/layout/xul/base/src/crashtests/311457-1.html
new file mode 100644
index 00000000000..e5b6ecdd63e
--- /dev/null
+++ b/mozilla/layout/xul/base/src/crashtests/311457-1.html
@@ -0,0 +1,12 @@
+<html><head>
+
+</head>
+
+<body>
+
+<div style="display: -moz-deck"><div style="display: -moz-popup"></div></div>
+
+<div style="position: relative">Y</div>
+
+</body>
+</html>
\ No newline at end of file
diff --git a/mozilla/layout/xul/base/src/crashtests/crashtests.list b/mozilla/layout/xul/base/src/crashtests/crashtests.list
index 18e80a370c3..604f233f250 100644
--- a/mozilla/layout/xul/base/src/crashtests/crashtests.list
+++ b/mozilla/layout/xul/base/src/crashtests/crashtests.list
@@ -1,3 +1,4 @@
+load 311457-1.html
 load 327776-1.html
 load 329407-1.xml
 load 346083-1.html
