diff --git a/layout/generic/crashtests/398332-1.html b/layout/generic/crashtests/398332-1.html
new file mode 100644
index 000000000000..d24d85c0496f
--- /dev/null
+++ b/layout/generic/crashtests/398332-1.html
@@ -0,0 +1,19 @@
+<html><head>
+<title>Testcase bug - Crash [@ nsHTMLReflowState::GetNearestContainingBlock] with display: -moz-box, generated content, positioning and fieldset</title>
+<style>
+small::before { content: "m m";}
+strike::before { content: "m m";}
+</style>
+</head>
+<body>
+<div style="display: -moz-box;">
+  <strike style="overflow: -moz-hidden-unscrollable; position: absolute;"></strike>
+  <fieldset style="position: relative;">
+    <strike style="overflow: -moz-hidden-unscrollable; position: absolute;"><small style="position: relative;">
+      <span style="position: absolute;"></span>
+    </small>
+  </strike>
+</fieldset>
+</div>
+</body>
+</html>
\ No newline at end of file
diff --git a/layout/generic/crashtests/398332-2.html b/layout/generic/crashtests/398332-2.html
new file mode 100644
index 000000000000..79b6f3b60b15
--- /dev/null
+++ b/layout/generic/crashtests/398332-2.html
@@ -0,0 +1,27 @@
+<html>
+<head>
+<script>
+function removestyles(i){
+document.getElementsByTagName('*')[5].removeAttribute('style');
+document.body.offsetHeight;
+document.getElementsByTagName('*')[6].removeAttribute('style');
+document.body.offsetHeight;
+document.getElementsByTagName('*')[7].removeAttribute('style');
+}
+
+setTimeout(removestyles,300);
+</script>
+
+</head>
+<body>
+<div style="position: relative; width: 500px;">
+  <span style="position: absolute; -moz-column-count: 2;">
+    <span style=" position: absolute;">
+      <span style=" display: inline-block; ">m</span>
+      <input>
+      <input style="position: fixed;">m
+    </span>
+  </span>
+</div>
+</body>
+</html>
\ No newline at end of file
diff --git a/layout/generic/crashtests/398332-3.html b/layout/generic/crashtests/398332-3.html
new file mode 100644
index 000000000000..991aa6d3dd58
--- /dev/null
+++ b/layout/generic/crashtests/398332-3.html
@@ -0,0 +1,4 @@
+<marquee style="position: relative; right: 20%;">"Ë”Öqü®Û;<span style="position: relative; word-spacing: -100px;"><span style="position: absolute;">
+<style>span::before { content:"before textbefore textbefore textbefore textbefore textbefore text"; }</style>
+
+
diff --git a/layout/generic/crashtests/crashtests.list b/layout/generic/crashtests/crashtests.list
index d1d89e41179d..060255174e96 100644
--- a/layout/generic/crashtests/crashtests.list
+++ b/layout/generic/crashtests/crashtests.list
@@ -163,6 +163,9 @@ load 398181-1.html
 load 398181-2.html
 load 398322-1.html
 load 398322-2.html
+load 398332-1.html
+load 398332-2.html
+asserts(2) load 398332-3.html # bug 436123 and bug 457397
 load 399407-1.xhtml
 load 399412-1.html
 load 399843-1.html
