(Don't know if Layout is the correct component for this, if not I'm sorry). NS_NewImageManager() is missing an NS_ADDREF(), this is not triggered in viewer or apprunner but it is triggerd by one of the examples from http://www.doczilla.com/development/samples.zip (Embedding NGLayout Programmatically). The problem is that NS_NewImageManager() stores a pointer to the imagemanager in a global static pointer (gImageManager) and returns a pointer to the caller with a refcount of 1, thus the imagemenager is deleted when the caller releases it (if there's only one) but the static global ponter still points to the deleted imagemanager. From reading the comments the imagemanager will become a service but for the moment this is a bug!

fixed last week or so.

Fixed in April 13th Build