diff --git a/content/xbl/crashtests/507628-1.xhtml b/content/xbl/crashtests/507628-1.xhtml
new file mode 100644
index 00000000000..a82871f7180
--- /dev/null
+++ b/content/xbl/crashtests/507628-1.xhtml
@@ -0,0 +1,12 @@
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/content/xbl/crashtests/507991-1.xhtml b/content/xbl/crashtests/507991-1.xhtml
new file mode 100644
index 00000000000..402e680eec4
--- /dev/null
+++ b/content/xbl/crashtests/507991-1.xhtml
@@ -0,0 +1,18 @@
+
+
+
+Crash [@ nsSprocketLayout::PopulateBoxSizes] with object and position:absolute;overflow:scroll in binding
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/content/xbl/crashtests/crashtests.list b/content/xbl/crashtests/crashtests.list
index 871e519853d..c56958e5375 100644
--- a/content/xbl/crashtests/crashtests.list
+++ b/content/xbl/crashtests/crashtests.list
@@ -30,3 +30,5 @@ load 464863-1.xhtml
load 472260-1.xhtml
load 492978-1.xul
load 495354-1.xhtml
+load 507628-1.xhtml
+load 507991-1.xhtml