diff --git a/mozilla/layout/generic/crashtests/408304-1.xhtml b/mozilla/layout/generic/crashtests/408304-1.xhtml
new file mode 100644
index 00000000000..e0e09801d09
--- /dev/null
+++ b/mozilla/layout/generic/crashtests/408304-1.xhtml
@@ -0,0 +1,5 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<body>
+<fieldset><span><fieldset><legend><div ><div style="margin: 0pt 100%;"></div></div></legend></fieldset></span></fieldset>
+</body>
+</html>
diff --git a/mozilla/layout/generic/crashtests/411851-1.html b/mozilla/layout/generic/crashtests/411851-1.html
new file mode 100644
index 00000000000..c7ba0965f00
--- /dev/null
+++ b/mozilla/layout/generic/crashtests/411851-1.html
@@ -0,0 +1,8 @@
+<!DOCTYPE html>
+<html style="padding: 17895704px;">
+<head>
+</head>
+<body>
+<div style="float: left;">Foo</div>Bar<span style="margin: 10em; height: 17895697px; float: left;"></span>
+</body>
+</html>
diff --git a/mozilla/layout/generic/crashtests/crashtests.list b/mozilla/layout/generic/crashtests/crashtests.list
index 58ecec6d930..d78321be99b 100644
--- a/mozilla/layout/generic/crashtests/crashtests.list
+++ b/mozilla/layout/generic/crashtests/crashtests.list
@@ -118,6 +118,7 @@ load 404219-2.html
 load 406380.html
 load 406902-1.html
 load 407009-1.xhtml
+load 408304-1.xhtml
 load 408602-1.html
 load 408737-1.html
 load 408737-2.html
diff --git a/mozilla/layout/mathml/crashtests/404485-1.xhtml b/mozilla/layout/mathml/crashtests/404485-1.xhtml
new file mode 100644
index 00000000000..fea18cbd596
--- /dev/null
+++ b/mozilla/layout/mathml/crashtests/404485-1.xhtml
@@ -0,0 +1,9 @@
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:math="http://www.w3.org/1998/Math/MathML">
+
+<body onload="document.getElementById('s').firstChild.splitText(1);">
+
+<math:msqrt><span xmlns="http://www.w3.org/1999/xhtml" id="s">x <math:mo/></span></math:msqrt>
+
+</body>
+
+</html>
diff --git a/mozilla/layout/mathml/crashtests/crashtests.list b/mozilla/layout/mathml/crashtests/crashtests.list
index e638c1682a5..b08b156520f 100644
--- a/mozilla/layout/mathml/crashtests/crashtests.list
+++ b/mozilla/layout/mathml/crashtests/crashtests.list
@@ -32,6 +32,7 @@ load 397518-1.xhtml
 load 400475-1.xhtml
 load 402400-1.xhtml
 load 403156-1.xhtml
+load 404485-1.xhtml
 load 405187-1.xhtml
 load 405271-1.xml
 load 412237-1.xml
