Just opening and closing the mail compose window two times or more crashes at this point. This crash occurs in mozilla branch builds. Here is the stack trace NTDLL! 77f7629c() js_AllocGCThing(JSContext * 0x04dd0d20, unsigned int 0) line 381 + 41 bytes js_NewObject(JSContext * 0x04dd0d20, JSClass * 0x02918780 struct JSClass KeyEventClass, JSObject * 0x00db8050, JSObject * 0x00000000) line 1440 + 11 bytes JS_NewObject(JSContext * 0x04dd0d20, JSClass * 0x02918780 struct JSClass KeyEventClass, JSObject * 0x00db8050, JSObject * 0x00000000) line 1892 + 21 bytes NS_NewScriptKeyEvent(nsIScriptContext * 0x04dd1160, nsISupports * 0x070afaf4, nsISupports * 0x00000000, void * * 0x0012cb44) line 1014 + 23 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x070afaf4) line 141 + 25 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x06f5b100, nsIDOMEvent * 0x070afaf4, nsIDOMEventTarget * 0x05b64328, unsigned int 2, unsigned int 7) line 788 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x04dd2940, nsEvent * 0x0012d558, nsIDOMEvent * * 0x0012d2a4, nsIDOMEventTarget * 0x05b64328, unsigned int 7, nsEventStatus * 0x0012d57c) line 1207 + 39 bytes nsXULElement::HandleDOMEvent(nsXULElement * const 0x05b64320, nsIPresContext * 0x04dd2940, nsEvent * 0x0012d558, nsIDOMEvent * * 0x0012d2a4, unsigned int 1, nsEventStatus * 0x0012d57c) line 3321 nsEventStateManager::PreHandleEvent(nsEventStateManager * const 0x05fbec88, nsIPresContext * 0x04dd2940, nsEvent * 0x0012d8a4, nsIFrame * 0x00dad758, nsEventStatus * 0x0012d80c, nsIView * 0x04e5d8d0) line 563 PresShell::HandleEventInternal(nsEvent * 0x0012d8a4, nsIView * 0x04e5d8d0, unsigned int 1, nsEventStatus * 0x0012d80c) line 4249 + 43 bytes PresShell::HandleEvent(PresShell * const 0x04e5d244, nsIView * 0x04e5d8d0, nsGUIEvent * 0x0012d8a4, nsEventStatus * 0x0012d80c, int 1, int & 1) line 4190 + 25 bytes nsView::HandleEvent(nsView * const 0x04e5d8d0, nsGUIEvent * 0x0012d8a4, unsigned int 28, nsEventStatus * 0x0012d80c, int 1, int & 1) line 379 nsViewManager2::DispatchEvent(nsViewManager2 * const 0x04e5dab0, nsGUIEvent * 0x0012d8a4, nsEventStatus * 0x0012d80c) line 1439 HandleEvent(nsGUIEvent * 0x0012d8a4) line 68 nsWindow::DispatchEvent(nsWindow * const 0x04e5d794, nsGUIEvent * 0x0012d8a4, nsEventStatus & nsEventStatus_eIgnore) line 681 + 10 bytes nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012d8a4) line 702 nsWindow::DispatchFocus(unsigned int 108) line 4039 + 15 bytes nsWindow::ProcessMessage(unsigned int 8, unsigned int 410846036, long 0, long * 0x0012dbe8) line 3099 + 19 bytes nsWindow::WindowProc(HWND__ * 0x8575024a, unsigned int 8, unsigned int 410846036, long 0) line 950 + 27 bytes USER32! 77e719d0() USER32! 77e71982() NTDLL! 77f763a3() USER32! 77e8a5c0() USER32! 77e82d7c() USER32! 77e720ff() USER32! 77e82832() USER32! 77e8903f() USER32! 77e8ad30() USER32! 77e8b044() USER32! 77e8aed8() USER32! 77e8b203() USER32! 77e8a5a6() nsDebug::Assertion(const char * 0x07050710, const char * 0x100c6474, const char * 0x070506e4, int 347) line 215 + 22 bytes nsDebug::NotReached(const char * 0x07050710, const char * 0x070506e4, int 347) line 414 + 22 bytes nsHTMLEditor::~nsHTMLEditor() line 347 + 21 bytes nsHTMLEditorLog::~nsHTMLEditorLog() line 51 + 22 bytes nsHTMLEditorLog::`scalar deleting destructor'() + 15 bytes nsEditor::Release(nsEditor * const 0x077ef400) line 954 + 158 bytes nsHTMLEditor::Release(nsHTMLEditor * const 0x077ef400) line 353 + 12 bytes nsHTMLEditorLog::Release(nsHTMLEditorLog * const 0x077ef400) line 54 + 12 bytes nsCOMPtr<nsIHTMLEditor>::~nsCOMPtr<nsIHTMLEditor>() line 490 nsEditorShell::~nsEditorShell() line 270 + 163 bytes nsEditorShell::`scalar deleting destructor'(unsigned int 1) + 15 bytes nsEditorShell::Release(nsEditorShell * const 0x077b4a00) line 273 + 157 bytes nsXPCWrappedNative::~nsXPCWrappedNative() line 398 + 27 bytes nsXPCWrappedNative::`scalar deleting destructor'(unsigned int 1) + 15 bytes nsXPCWrappedNative::Release(nsXPCWrappedNative * const 0x077b49a0) line 71 + 31 bytes nsXPCWrappedNative::JSObjectFinalized(JSContext * 0x0777d5f0, JSObject * 0x065d62a0) line 96 WrappedNative_Finalize(JSContext * 0x0777d5f0, JSObject * 0x065d62a0) line 783 js_FinalizeObject(JSContext * 0x0777d5f0, JSObject * 0x065d62a0) line 1600 + 114 bytes gc_finalize_phase(JSContext * 0x0777d5f0, unsigned int 444) line 907 + 11 bytes js_GC(JSContext * 0x0777d5f0, unsigned int 0) line 1173 + 13 bytes js_ForceGC(JSContext * 0x0777d5f0) line 871 + 11 bytes js_DestroyContext(JSContext * 0x0777d5f0, int 2) line 219 + 9 bytes JS_DestroyContext(JSContext * 0x0777d5f0) line 832 + 11 bytes nsJSContext::~nsJSContext() line 366 + 13 bytes nsJSContext::`scalar deleting destructor'(unsigned int 1) + 15 bytes nsJSContext::Release(nsJSContext * const 0x0777ee00) line 374 + 154 bytes nsCOMPtr<nsIScriptContext>::assign_assuming_AddRef(nsIScriptContext * 0x00000000) line 472 nsCOMPtr<nsIScriptContext>::assign_with_AddRef(nsISupports * 0x00000000) line 849 nsCOMPtr<nsIScriptContext>::operator=(nsIScriptContext * 0x00000000) line 584 nsDocShell::Destroy(nsDocShell * const 0x07771684) line 1614 nsWebShell::Destroy(nsWebShell * const 0x07771684) line 1393 nsXULWindow::Destroy(nsXULWindow * const 0x07772bc4) line 324 nsWebShellWindow::Destroy(nsWebShellWindow * const 0x07772bc4) line 1779 nsWebShellWindow::Close(nsWebShellWindow * const 0x07772c20) line 368 nsWebShellWindow::HandleEvent(nsGUIEvent * 0x0012f63c) line 447 nsWindow::DispatchEvent(nsWindow * const 0x07776144, nsGUIEvent * 0x0012f63c, nsEventStatus & nsEventStatus_eIgnore) line 681 + 10 bytes nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f63c) line 702 nsWindow::DispatchStandardEvent(unsigned int 101) line 722 + 15 bytes nsWindow::ProcessMessage(unsigned int 16, unsigned int 0, long 0, long * 0x0012f974) line 2795 nsWindow::WindowProc(HWND__ * 0x019d03c2, unsigned int 16, unsigned int 0, long 0) line 950 + 27 bytes USER32! 77e719d0() USER32! 77e71982() NTDLL! 77f763a3() USER32! 77e718d2() nsWindow::DefaultWindowProc(HWND__ * 0x019d03c2, unsigned int 274, unsigned int 61536, long 10748652) line 977 USER32! 77e727fe() USER32! 77e72889() nsWindow::WindowProc(HWND__ * 0x019d03c2, unsigned int 274, unsigned int 61536, long 10748652) line 957 + 31 bytes USER32! 77e719d0() USER32! 77e71982() NTDLL! 77f763a3() USER32! 77e718d2() nsWindow::DefaultWindowProc(HWND__ * 0x019d03c2, unsigned int 161, unsigned int 20, long 10748652) line 977 USER32! 77e727fe() USER32! 77e72889() nsWindow::WindowProc(HWND__ * 0x019d03c2, unsigned int 161, unsigned int 20, long 10748652) line 957 + 31 bytes USER32! 77e71820() 00a402ec()

Reassigning to XP Utilities, in light of bug 54792 -

Reassigning to dougt@netscape.com, as in bug 54792

The stack trace here looks identical to bug 54792, so marking as duplicate - *** This bug has been marked as a duplicate of 54792 ***

Verified dupe.