Here's the stack trace: NTDLL! 77f76148() JS_GetPrivate(JSContext * 0x00f2c170, JSObject * 0x010a2b70) line 1068 + 142 bytes GetHTMLDocumentProperty(JSContext * 0x00f2c170, JSObject * 0x010a2b70, long -11, long * 0x0012f2c0) line 90 + 14 bytes js_Interpret(JSContext * 0x00f2c170, long * 0x0012f43c) line 2233 + 37 bytes js_Invoke(JSContext * 0x00f2c170, unsigned int 0, int 0) line 657 + 13 bytes js_Interpret(JSContext * 0x00f2c170, long * 0x0012fbc0) line 2187 + 15 bytes js_Invoke(JSContext * 0x00f2c170, unsigned int 1, int 0) line 657 + 13 bytes js_CallFunctionValue(JSContext * 0x00f2c170, JSObject * 0x010a0f98, long 17441840, unsigned int 1, long * 0x0012fcdc, long * 0x0012fce4) line 726 + 15 bytes JS_CallFunctionValue(JSContext * 0x00f2c170, JSObject * 0x010a0f98, long 17441840, unsigned int 1, long * 0x0012fcdc, long * 0x0012fce4) line 2336 + 29 bytes nsJSEventListener::ProcessEvent(nsIDOMEvent * 0x014089b0) line 97 + 34 bytes nsEventListenerManager::HandleEvent(nsIPresContext & {...}, nsEvent * 0x0012fe14, nsIDOMEvent * * 0x0012fd94, nsEventStatus & nsEventStatus_eIgnore) line 491 + 17 bytes GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x00efeee4, nsIPresContext & {...}, nsEvent * 0x0012fe14, nsIDOMEvent * * 0x0012fd94, unsigned int 1, nsEventStatus & nsEventStatus_eIgnore) line 1724 nsWebShell::OnConnectionsComplete(nsWebShell * const 0x00ed36d0) line 1672 + 34 bytes nsDocLoaderImpl::LoadURLComplete(nsIURL * 0x00f2b080, nsISupports * 0x00efed40, int 0) line 972 nsDocumentBindInfo::OnStopBinding(nsDocumentBindInfo * const 0x00efed40, nsIURL * 0x00f2b080, int 0, const nsString & {""}) line 1422 OnStopBindingProxyEvent::HandleEvent(OnStopBindingProxyEvent * const 0x01408930) line 539 StreamListenerProxyEvent::HandlePLEvent(PLEvent * 0x01408934) line 421 + 12 bytes PL_HandleEvent(PLEvent * 0x01408934) line 395 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x00e86d10) line 357 + 9 bytes _md_EventReceiverProc(HWND__ * 0x000105d8, unsigned int 49394, unsigned int 0, long 15232272) line 675 + 9 bytes USER32! 77e71250() 00e86d10()

Dup of bug# 1223. The page uses the JavaScript "with" construct that is currently busted in the JS engine. *** This bug has been marked as a duplicate of 1223 ***

Marking Verified as a dup.