See upcoming testcase, which crashes on print preview. This seems to have regressed between 2006-10-18 and 2006-10-19: http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2006-10-18+05&maxdate=2006-10-19+06&cvsroot=%2Fcvsroot It seems to me a regression from bug 343445, somehow. In a debug build, I get these assertions prior to the crash: ###!!! ASSERTION: aFrame is already associated with a region: '!GetFrameInfoFor( aFrame)', file c:/mozilla/mozilla/layout/generic/nsSpaceManager.cpp, line 812 WARNING: nsBlockFrame::CheckFloats: Explicit float list is out of sync with floa t cache: file c:/mozilla/mozilla/layout/generic/nsBlockFrame.cpp, line 7294 ###!!! ASSERTION: no bands: '!mBandList.IsEmpty()', file c:/mozilla/mozilla/layo ut/generic/nsSpaceManager.cpp, line 880

Talkback ID: TB26797474Z nsSpaceManager::BandRect::IsOccupiedBy [mozilla\layout\generic\nsspacemanager.cpp, line 1380] nsSpaceManager::RemoveTrailingRegions [mozilla\layout\generic\nsspacemanager.cpp, line 854] nsBlockFrame::CheckFloats [mozilla\layout\generic\nsblockframe.cpp, line 7321] nsBlockFrame::Reflow [mozilla\layout\generic\nsblockframe.cpp, line 1027]

Backtrace which contains backtrace from the first assertion and the crash itself.

This is worksforme, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a3pre) Gecko/20070319 Minefield/3.0a3pre