diff --git a/layout/base/crashtests/349095-1.xhtml b/layout/base/crashtests/349095-1.xhtml
new file mode 100644
index 00000000000..6d3448376bb
--- /dev/null
+++ b/layout/base/crashtests/349095-1.xhtml
@@ -0,0 +1,25 @@
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+
+<style>
+body:first-letter { }
+body { display: inline; }
+</style>
+
+<script>
+function foo()
+{
+  document.getElementById("aa").style.display = "block";
+}
+</script>
+
+</head>
+
+<body onload="foo()">
+  <input type="text" style="display: block;" />
+  <span>Z</span>
+  <span id="aa">A</span>
+  <span style="display: block;">B</span>
+</body>
+
+</html>
diff --git a/layout/base/crashtests/crashtests.list b/layout/base/crashtests/crashtests.list
index ca50464975c..d9bfe9e169a 100644
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@@ -8,5 +8,6 @@ load 331204-1.html
 load 335140-1.html
 load 337419-1.html
 load 343540-1.html
+load 349095-1.xhtml
 load 379920-1.svg
 load 379920-1.svg
