The URL crashes my NGLayout (Win32 March 4th nightly build) every time. The problem disappears if I embed the style sheet using the STYLE element instead of LINKing it.

The problem here is that nsCSSFrameConstructor::ReconstructDocElementHierarchy isn't dealing with fixed items at all.

*** Bug 3572 has been marked as a duplicate of this bug. ***

And I might add that ReconstructDocElementHierarchy() is an abomination that Vidur added and it's questionable that we should be using it at all...

Changed ReconstructDocElementHierarchy() to handle fixed elements

Using the 3/26 build on Win 95, Win NT, Win 98, Mac8.5 and Linux with the URL above, the page does not crash but all the content bunches up and it is impossible to decifer. Reopening bug.

If you looked at the style sheet, you would see that's because each of the fixed elements is positioned exactly the same using 'auto' for 'top' and 'left'. That's why they all end up on top of each other basic.css P { position: fixed; } Don't re-open bugs for reasons other than specified in the bug report. If it was reported because the page crashes, then if it no longer crashes mark it VERIFIED. If need be, then file a new bug for an additional problems.

OK, thanks - using 3/26 build, verifying bug fixed in terms of crashing