It dies with this stack trace; "this" is pointing to free memory or unitialized memory. #0 0x40540263 in nsParser::ResumeParse (this=0x8238508, aDefaultDTD=0x0) at nsParser.cpp:823 #1 0x4053f709 in nsParser::EnableParser (this=0x8238508, aState=1) at nsParser.cpp:523 #2 0x40e8d7be in XULContentSinkImpl::DoneLoadingStyle (aLoader=0x8273410, aData=@0x8273448, aRef=0x82733c0, aStatus=0) at nsXULContentSink.cpp:775 #3 0x406ab313 in nsUnicharStreamLoader::OnStopBinding (this=0x8273410, aURL=0x8214400, aStatus=0, aMsg=0xbffff278) at nsNetStreamLoader.cpp:156 #4 0x4001e592 in nsDocumentBindInfo::OnStopBinding (this=0x8273478, aURL=0x8214400, aStatus=0, aMsg=0xbffff278) at nsDocLoader.cpp:1994 #5 0x406ae69b in stub_complete (stream=0x82771f8) at nsStubContext.cpp:765 #6 0x4063c64b in net_ProcessFile (cur_entry=0x81ffe08) at mkfile.c:1360 #7 0x406cf46f in NET_ProcessNet (ready_fd=0x0, fd_type=1) at mkgeturl.c:3355 #8 0x406d7351 in NET_PollSockets () at mkselect.c:298 #9 0x406a7f52 in nsNetlibService::NetPollSocketsCallback (aTimer=0x822bf90, aClosure=0x81ca1a8) at nsNetService.cpp:1263 #10 0x40510de9 in TimerImpl::FireTimeout (this=0x822bf90) at nsTimer.cpp:73 #11 0x405112d2 in nsTimerExpired (aCallData=0x822bf90) at nsTimer.cpp:189 #12 0x40a8dc81 in g_timeout_dispatch () #13 0x40a8ce12 in g_main_dispatch () #14 0x40a8d40b in g_main_iterate () #15 0x40a8d5c1 in g_main_run () #16 0x409b3b6b in gtk_main () #17 0x4004d480 in nsAppShell::Run (this=0x807b480) at nsAppShell.cpp:208 #18 0x8054172 in nsNativeViewerApp::Run (this=0x8072248) at nsGTKMain.cpp:42 #19 0x8054386 in main (argc=2, argv=0xbffff7d4) at nsGTKMain.cpp:97

I believe this got fxed along the way, but I don't know when. All I know is that we don't seem to crash anymore on NT.

Won't crash for me on NT ( or Linux