diff --git a/mozilla/layout/forms/crashtests/366205-1.html b/mozilla/layout/forms/crashtests/366205-1.html
new file mode 100644
index 00000000000..2a3786afe0e
--- /dev/null
+++ b/mozilla/layout/forms/crashtests/366205-1.html
@@ -0,0 +1,11 @@
+<html>
+<head>
+</head>
+<body onload='var yar=document.getElementById("yar"); yar.parentNode.removeChild(yar); document.getElementById("foo").removeAttribute("multiple");'>
+
+<div id="yar">Clicking the button below should not trigger an assertion</div>
+
+<select id="foo" multiple><option>A</option></select>
+
+</body>
+</html>
\ No newline at end of file
diff --git a/mozilla/layout/forms/crashtests/380116-1.xhtml b/mozilla/layout/forms/crashtests/380116-1.xhtml
new file mode 100644
index 00000000000..cb37ff079a0
--- /dev/null
+++ b/mozilla/layout/forms/crashtests/380116-1.xhtml
@@ -0,0 +1,11 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<body onload="document.getElementById('t').style.display = 'block';">
+
+<table border="1" id="t">
+ <tr>
+  <td><select><option>foopy</option></select></td>
+ </tr>
+</table>
+
+</body>
+</html>
diff --git a/mozilla/layout/forms/crashtests/crashtests.list b/mozilla/layout/forms/crashtests/crashtests.list
index 5cce6ae9853..52954e4adf8 100644
--- a/mozilla/layout/forms/crashtests/crashtests.list
+++ b/mozilla/layout/forms/crashtests/crashtests.list
@@ -5,10 +5,12 @@ load 323499-1.html
 load 363696-1.xul
 load 363696-2.html
 load 363696-3.html
+load 366205-1.html
 load 366537-1.xhtml
 load 367587-1.html
 load 370940-1.html
 load 373586-1.xhtml
+load 380116-1.xhtml
 load 382610-1.html
 load 383887-1.html
 load 386554-1.html
