Here's the stack trace: NTDLL! 77f76148() nsDebug::Assertion(const char * 0x00678d4c, const char * 0x00678d2c, const char * 0x00678cf0, int 1538) line 125 + 13 bytes HTMLContentSink::SetTitle(HTMLContentSink * const 0x016d3510, const nsString & {"MOVIES Main Page"}) line 1538 + 40 bytes CNavDTD::HandleStartToken(CToken * 0x00f6ef00) line 818 NavDispatchTokenHandler(CToken * 0x00f6ef00, nsIDTD * 0x01642710) line 261 + 12 bytes CTokenHandler::operator()(CToken * 0x00f6ef00, nsIDTD * 0x01642710) line 80 + 14 bytes CNavDTD::HandleToken(CNavDTD * const 0x01642710, CToken * 0x00f6ef00, nsIParser * 0x016d3620) line 545 + 18 bytes CNavDTD::BuildModel(CNavDTD * const 0x01642710, nsIParser * 0x016d3620) line 475 + 20 bytes nsParser::BuildModel() line 695 + 16 bytes nsParser::ResumeParse(nsIDTD * 0x00000000) line 652 + 11 bytes nsParser::OnDataAvailable(nsParser * const 0x016d3624, nsIURL * 0x016d47d0, nsIInputStream * 0x016d6f70, unsigned int 47) line 879 + 17 bytes nsDocumentBindInfo::OnDataAvailable(nsDocumentBindInfo * const 0x016d43f0, nsIURL * 0x016d47d0, nsIInputStream * 0x016d6f70, unsigned int 47) line 1601 + 24 bytes OnDataAvailableProxyEvent::HandleEvent(OnDataAvailableProxyEvent * const 0x016d5610) line 616 StreamListenerProxyEvent::HandlePLEvent(PLEvent * 0x016d5614) line 455 + 12 bytes PL_HandleEvent(PLEvent * 0x016d5614) line 395 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x00ebe920) line 357 + 9 bytes _md_EventReceiverProc(HWND__ * 0x002300cc, unsigned int 49306, unsigned int 0, long 15460640) line 675 + 9 bytes USER32! 77e71250() 00ebe920()

Fixed by correct initialization of hasOpenHead in CNavDTD.cpp.

This needs to be verified by someone with a debug build; while the page layout is completely broken, there's no crash on Mac/Win32 (2.3.99) or Linux (2.2.99), so I'm assuming it's a debugging assert.

setting Eli as QA -- so we have QA in the loop, however one of the developers will need to verify the bug fix.

Troy provide a test case for verification

[QA Assigning to Beth, per E-mail conversation.]

marking as verified based on discussion with engineer