the search form at the top of cnn.com causes a crash using the 11/30 build on NT and win98. part of the form code is below. basically, there is a js call (document.seek_top.submit()) to do a GET request when "go" is clicked on. <FORM NAME="seek_top" METHOD=GET ACTION="http://search.cnn.com:8765/query.html"> <A HREF="javascript:document.seek_top.submit()"><FONT FACE="Helvetica, Arial,sans-serif" COLOR="#FFFFFF" SIZE="2">go</FONT></A>

This one can be distilled to: http://blueviper/forms/submitcrash.html It appears that JS is trying to fetch the property "submit" of the form seek_top and is getting back a null. Still looking into it.

Gecko no longer crashes in this case cnn.com has changed their page for Gecko's useragent string. However, I tested with an old version I had saved (blueviper/forms/submitcrash_cnn.html) and the "distilled version" (blueviper/forms/submitcrash.html) and neither caused a crash.

Marking Verified/Invalid