We currently fire the UserDataHandler for dying nodes synchronously in the destructor for nsGenericElement etc. This can be dangerous since they are often implemented in script, and we can be in an inconsistent state when firing them, possibly leading to crashes. We should either make sure that we're in a stable state such that we can deal with scripts running, or, better yet, why not fire the handlers asynchronously? There is no definition of when a node dies anyway so we can fire the handler off an event.

I second the event thing, fwiw. Just make sure to update your tree to Darin's patch first. ;)

I'm not convinced anymore that we should call the handlers for NODE_DELETED. Anyway, here's a patch.

Bug 324871 removed NODE_DELETED calls.