clicking on "new msg" causes this assertion: NTDLL! 77f7629c() nsDebug::Assertion(const char * 0x02f17810, const char * 0x02f177ec, const char * 0x02f177b0, int 204) line 191 + 13 bytes GetNodeLocation(nsIDOMNode * 0x00000000, nsCOMPtr<nsIDOMNode> * 0x0012eacc, int * 0x0012ead0) line 204 + 44 bytes nsMsgCompose::ConvertAndLoadComposeWindow(nsIEditorShell * 0x066a3d50, nsString & {...}, nsString & {...}, nsString & {...}, int 0, int 1) line 308 + 22 bytes nsMsgCompose::BuildBodyMessageAndSignature() line 2112 + 54 bytes nsMsgDocumentStateListener::NotifyDocumentCreated(nsMsgDocumentStateListener * const 0x066ac0a0) line 1784 nsEditor::NotifyDocumentListeners(nsEditor * const 0x066d4a60, nsEditor::TDocumentListenerNotification eDocumentCreated) line 2708 + 23 bytes nsEditor::PostCreate(nsEditor * const 0x066d4a60) line 897 nsHTMLEditor::PostCreate(nsHTMLEditor * const 0x066d4a60) line 527 + 9 bytes nsEditorShell::PrepareDocumentForEditing(nsIDocumentLoader * 0x06631770, nsIURI * 0x066ade80) line 423 + 32 bytes nsEditorShell::OnEndDocumentLoad(nsEditorShell * const 0x066a3d58, nsIDocumentLoader * 0x06631770, nsIChannel * 0x066adbe0, unsigned int 0) line 4260 + 27 bytes nsWebShell::OnEndDocumentLoad(nsWebShell * const 0x06630340, nsIDocumentLoader * 0x06631770, nsIChannel * 0x066adbe0, unsigned int 0) line 1211 nsDocLoaderImpl::FireOnEndDocumentLoad(nsDocLoaderImpl * 0x06631770, nsIChannel * 0x066adbe0, unsigned int 0) line 638 nsDocLoaderImpl::DocLoaderIsEmpty(unsigned int 0) line 514 nsDocLoaderImpl::OnStopRequest(nsDocLoaderImpl * const 0x06631774, nsIChannel * 0x066adbe0, nsISupports * 0x00000000, unsigned int 0, const unsigned short * 0x00000000) line 458 nsLoadGroup::RemoveChannel(nsLoadGroup * const 0x06631710, nsIChannel * 0x066adbe0, nsISupports * 0x00000000, unsigned int 0, const unsigned short * 0x00000000) line 544 + 39 bytes nsStreamIOChannel::OnStopRequest(nsStreamIOChannel * const 0x066adbe4, nsIChannel * 0x066ad940, nsISupports * 0x00000000, unsigned int 0, const unsigned short * 0x00000000) line 631 nsOnStopRequestEvent::HandleEvent(nsOnStopRequestEvent * const 0x066ad5c0) line 307 nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x066ad420) line 97 + 12 bytes PL_HandleEvent(PLEvent * 0x066ad420) line 575 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x010608d0) line 520 + 9 bytes _md_EventReceiverProc(HWND__ * 0x009105d2, unsigned int 49344, unsigned int 0, long 17172688) line 1030 + 9 bytes USER32! 77e71820() 0106

try loading a html page in Composer

It's a dup of bug 36425 for which I have a fix *** This bug has been marked as a duplicate of 36425 ***

Mark it verified/dup.