diff --git a/gfx/thebes/crashtests/395335-1.xhtml b/gfx/thebes/crashtests/395335-1.xhtml
new file mode 100644
index 00000000000..d9b73edc160
--- /dev/null
+++ b/gfx/thebes/crashtests/395335-1.xhtml
@@ -0,0 +1,20 @@
+<html xmlns="http://www.w3.org/1999/xhtml" 
+      xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+
+<head>
+<script>
+
+function boom()
+{
+  document.getElementById("tree").firstChild.data = "xyz";
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<xul:tree id="tree">a</xul:tree>
+
+</body>
+</html>
diff --git a/gfx/thebes/crashtests/crashtests.list b/gfx/thebes/crashtests/crashtests.list
index b5e5e93eceb..dde156b3178 100644
--- a/gfx/thebes/crashtests/crashtests.list
+++ b/gfx/thebes/crashtests/crashtests.list
@@ -16,6 +16,7 @@ load 393822-1.html
 load 394384-1.html
 load 394246-1.html
 skip-if(MOZ_WIDGET_TOOLKIT=="gtk2") load 394246-2.html # Bug 408746
+load 395335-1.xhtml
 load 404112-1.html
 load 404112-2.html
 load 407761-1.html
