The listed URL crashes Mozilla 1.0RC1 on page load.
On the console, the only thing printed is "Segmentation Fault".
Crashes on XP as well. TB5921079Z Since RC1 is old'ish now, the crash is probably known. Resolving as new for now till i get a stack.
Crash seems to be in nsVoidArray::InsertElementAt Only related bug i found was bug 63743. From top of 98 lines long stack: #0 0x40138cb2 in nsVoidArray::InsertElementAt () from libxpcom.so #1 0x417b2465 in nsFormFrame::AddFormControlFrame () from libgklayout.so #2 0x417b21d7 in nsFormFrame::AddFormControlFrame () from libgklayout.so #3 0x417bd0b8 in nsHTMLButtonControlFrame::SetInitialChildList () from libgklayout.so #4 0x417cf7ec in nsCSSFrameConstructor::ConstructHTMLFrame () from libgklayout.so #5 0x417d3450 in nsCSSFrameConstructor::ConstructFrameInternal () from libgklayout.so #6 0x417d30c9 in nsCSSFrameConstructor::ConstructFrame () from libgklayout.so #7 0x417dfdea in nsCSSFrameConstructor::ProcessInlineChildren () from libgklayout.so #8 0x417df75a in nsCSSFrameConstructor::ConstructInline () from libgklayout.so #9 0x417d26f1 in nsCSSFrameConstructor::ConstructFrameByDisplayType () from libgklayout.so #10 0x417d3504 in nsCSSFrameConstructor::ConstructFrameInternal () from libgklayout.so Trying xpcom as component
Might be a dup of bug 138725. Similar stack.
linux debug build threw some assertions before crashing: ###!!! ASSERTION: frame was not removed from primary frame map before destruction or was readded to map after being removed: '!PL_DHASH_ENTRY_IS_BUSY(entry) || entry->frame != aFrame', file nsFrameManager.cpp, line 1061
Created attachment 82330 [details] reduced testcase note that the <head> is actually in a <font> tag. The rest looks like standard html, but is necessary to produce the crash.
another indication it's a dup, then. Resolving as such. *** This bug has been marked as a duplicate of 138725 ***