The code that evaluates xslt-param XPath expressions doesn't initialize it's txExprResult recycler. This means that some expressions will crash with a null-pointer deref.
Created attachment 247006 [details] [diff] [review] Patch to fix This was already reviewed by peterv as part of bug 361442
This should be a very safe patch with extremely low risk and fixes a new feature in FF2 (xslt parameters)
Comment on attachment 247006 [details] [diff] [review] Patch to fix approved for 1.8 branch, a=dveditz
Checked in to trunk too
Removing dependency since I checked in the code here instead.