When I zoom in a lot on my Galaxy Tab, on basically any page, Fennec crashes inside the GL driver. Basically any zoom way in seems to do it for me. bp-6aadb043-6a1e-41d5-bbd7-a6e772110903 (All the crashes at this location are probably me.)
I can reproduce this on my Galaxy Tab in landscape orientation quite easily, but so far I've been unable to do so in portrait orientation.
I cannot reproduce this using the September 1 nightly (rev. d772dfb96ba1) but I can in the September 2 nightly (rev. 0664108eb19d). I can also reproduce this on the Xoom (with a more informative stack than what we're getting on the Galaxy Tab): bp-39e67446-7962-4fa4-bac4-917872110907
This is a regression from Bug 683514 (which enabled the GL_EXT_unpack_subimage extension on Tegra 2 devices like the Galaxy Tab and Xoom).
Backout on inbound: http://hg.mozilla.org/integration/mozilla-inbound/rev/4f3856dd4dd0
This was resolved by backing out the patch causing the regression.