diff --git a/mozilla/layout/base/crashtests/367243-1.html b/mozilla/layout/base/crashtests/367243-1.html
new file mode 100644
index 00000000000..23910438b12
--- /dev/null
+++ b/mozilla/layout/base/crashtests/367243-1.html
@@ -0,0 +1,37 @@
+<html class="reftest-wait">
+<head>
+
+<style id="style">
+.ch1 { counter-increment: chicken; }
+</style>
+
+<script>
+function boom()
+{
+  document.getElementsByTagName("ol")[0].setAttribute("class", "wtf");
+  document.getElementById("style").textContent = ".ch2 { counter-increment: chicken; }";
+  
+  document.documentElement.removeAttribute("class");
+}
+</script>
+</head>
+
+<body onload="setTimeout(boom, 30);">
+
+
+<ol>
+  <li class="ch1">item</li>
+  <li>item
+    <ol>
+      <li class="ch2">item</li>
+    </ol>
+  </li>
+</ol>
+
+<ol class="ch2">
+  <li>item</li>
+</ol>
+
+
+</body>
+</html>
diff --git a/mozilla/layout/base/crashtests/crashtests.list b/mozilla/layout/base/crashtests/crashtests.list
index 50645b30624..814f18ff17f 100644
--- a/mozilla/layout/base/crashtests/crashtests.list
+++ b/mozilla/layout/base/crashtests/crashtests.list
@@ -33,6 +33,7 @@ load 365909-2.xhtml
 load 366128-1.xhtml
 load 366967-1.html
 load 367015-1.html
+load 367243-1.html
 load 371681-1.xhtml
 load 372237-1.html
 load 372550-1.html
