OK.  So here we are... all extensions disabled and another segfault:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7ddb6c0 (LWP 21047)]
GCGraphBuilder::AddNode (this=0xbfeb05dc, s=0x9bcbda0, aParticipant=0x8e0f39c)
    at nsCycleCollector.cpp:1287
1287	nsCycleCollector.cpp: No such file or directory.
	in nsCycleCollector.cpp
Current language:  auto; currently c++
(gdb) thread apply all bt full

Thread 1191 (Thread 0xb16ffb90 (LWP 18833)):
#0  0xb80b8430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb806e3a2 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d0ff9e in pt_TimedWait (cv=0x8e05ce4, ml=0x8e05c80, timeout=60000)
    at ptsynch.c:280
	rv = 1507
	now = {tv_sec = 1226325435, tv_usec = 384749}
	tmo = {tv_sec = 1226325495, tv_nsec = 384749000}
	ticks = 1000
#3  0xb7d10dc0 in PR_WaitCondVar (cvar=0x8e05ce0, timeout=60000)
    at ptsynch.c:407
	rv = <value optimized out>
	thred = <value optimized out>
#4  0xb72ead4a in nsHostResolver::GetHostToLookup (this=0x8e05c20, 
    result=0xb16ff378) at nsHostResolver.cpp:595
	delta = <value optimized out>
	start = 2259756024
	timeout = 60000
#5  0xb72eb412 in nsHostResolver::ThreadFunc (arg=0x8e05c20)
    at nsHostResolver.cpp:690
	rec = (nsHostRecord *) 0xb17f2638
	ai = (PRAddrInfo *) 0x1966a3c0
#6  0xb7d171e1 in _pt_root (arg=0xaa9611e8) at ptthread.c:221
	detached = 1
#7  0xb806a50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#8  0xb7ebe7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 8 (Thread 0xb5b14b90 (LWP 21051)):
#0  0xb80b8430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7eb3f77 in poll () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb7d12d8c in _pr_poll_with_poll (pds=0x8e00e18, npds=3, timeout=65535000)
    at ptio.c:3895
	stack_syspoll = {{fd = 17, events = 1, revents = 0}, {fd = 38, 
    events = 3, revents = 0}, {fd = 23, events = 3, revents = 0}, {
    fd = -1359628320, events = -26880, revents = 2264}, {fd = -1246675016, 
    events = 4365, revents = -18526}, {fd = -1211346956, events = 0, 
    revents = 0}, {fd = -1246675016, events = 9477, revents = -18528}, {
    fd = -1359628312, events = 92, revents = 2275}, {fd = 149094492, 
    events = 20468, revents = -18484}, {fd = 425761320, events = 442, 
    revents = 0}, {fd = -1246674984, events = 9022, revents = -18528}, {
    fd = -1246674908, events = 0, revents = 0}, {fd = -1246674908, 
    events = 16420, revents = -19023}, {fd = -1246674908, events = 442, 
    revents = 0}, {fd = -1246674952, events = 3490, revents = -18526}, {
    fd = 425761320, events = -18456, revents = -20747}, {fd = -1246674952, 
    events = 3558, revents = -18526}, {fd = -1211346956, events = -18464, 
    revents = -20747}, {fd = -1246674872, events = 6558, revents = -18526}, {
    fd = -1207518754, events = 442, revents = 0}, {fd = -1246674908, 
    events = -15090, revents = -19845}, {fd = -2142830590, events = 5384, 
    revents = -20748}, {fd = 3, events = 30754, revents = -18638}, {
    fd = -1207513044, events = 0, revents = 0}, {fd = 21051, events = 0, 
    revents = 0}, {fd = 1, events = -18248, revents = -20747}, {fd = 1, 
    events = 4084, revents = -18478}, {fd = -1317645344, events = 24272, 
    revents = -20963}, {fd = -1246674840, events = 3888, revents = -18479}, {
    fd = -1317645344, events = 20468, revents = -18484}, {fd = -1246674824, 
    events = -6356, revents = -18639}, {fd = -1211346956, events = -15780, 
    revents = -21865}, {fd = -1246674808, events = -4315, revents = -18426}, {
    fd = -1210970124, events = -16000, revents = -21865}, {fd = -1246674792, 
    events = 25652, revents = -18479}, {fd = 1, events = 20468, 
    revents = -18484}, {fd = -1246674744, events = 20468, revents = -18484}, {
    fd = -1432895104, events = 24272, revents = -20963}, {fd = -1246674744, 
    events = 2700, revents = -18642}, {fd = -1246674680, events = -31864, 
    revents = -21797}, {fd = -1246674772, events = 21472, revents = -20106}, {
    fd = 1, events = 0, revents = 0}, {fd = 0, events = 20468, 
    revents = -18484}, {fd = -1373806904, events = 24268, revents = -20963}, {
    fd = -1246674664, events = -5224, revents = -18639}, {fd = -1432894884, 
    events = 24272, revents = -20963}, {fd = 0, events = 0, revents = 0}, {
    fd = 0, events = 24268, revents = -20963}, {fd = 4096, events = 7757, 
    revents = -18480}, {fd = -1373806880, events = 20468, revents = -18484}, {
    fd = -1246674648, events = -6452, revents = -18639}, {fd = -1373806880, 
    events = -15764, revents = -21865}, {fd = 442, events = 20468, 
    revents = -18484}, {fd = -1373806904, events = 0, revents = 0}, {
    fd = -1246674632, events = 20468, revents = -18484}, {fd = -1207518754, 
    events = 0, revents = 0}, {fd = -1246674632, events = 29960, 
    revents = -18480}, {fd = -1211075351, events = 4084, revents = -18478}, {
    fd = -1246674616, events = 16760, revents = -19023}, {fd = -1210970124, 
    events = 0, revents = 0}, {fd = -1209626698, events = 32597, 
    revents = -18479}, {fd = -1246674580, events = 0, revents = 0}, {
    fd = -1246674584, events = 6521, revents = -18642}, {fd = 148902508, 
    events = 2, revents = 0}}
	syspoll = (struct pollfd *) 0xb5b13f68
	index = 3
	msecs = 65535000
	ready = 0
	start = 2259759099
	elapsed = <value optimized out>
#3  0xb72e1a7b in nsSocketTransportService::Poll (this=0x8e00938, wait=1, 
    interval=0xb5b141e8) at nsSocketTransportService2.cpp:349
	pollList = (PRPollDesc *) 0x8e00e18
	pollCount = 3
	pollTimeout = 65535000
	ts = 2259759099
	rv = <value optimized out>
	passedInterval = <value optimized out>
#4  0xb72e1f70 in nsSocketTransportService::DoPollIteration (this=0x8e00938, 
    wait=1) at nsSocketTransportService2.cpp:644
	i = -1
	pollInterval = <value optimized out>
	n = <value optimized out>
#5  0xb72e221a in nsSocketTransportService::OnProcessNextEvent (
    this=0x8e00938, thread=0x8e01180, mayWait=1, depth=1)
    at nsSocketTransportService2.cpp:523
	val = 0
#6  0xb7a3650e in nsThread::ProcessNextEvent (this=0x8e01180, mayWait=1, 
    result=0xb5b14294) at nsThread.cpp:497
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x8e00940}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x8e00938}, <No data fields>}
	rv = <value optimized out>
#7  0xb7a06f88 in NS_ProcessNextEvent_P (thread=0x3, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#8  0xb72e1c93 in nsSocketTransportService::Run (this=0x8e00938)
    at nsSocketTransportService2.cpp:565
	thread = (class nsIThread *) 0x8e01180
	threadInt = {<nsCOMPtr_base> = {mRawPtr = 0x8e01180}, <No data fields>}
	i = <value optimized out>
#9  0xb7a3656c in nsThread::ProcessNextEvent (this=0x8e01180, mayWait=1, 
    result=0xb5b14344) at nsThread.cpp:510
	notifyGlobalObserver = 0
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x8e00944}, <No data fields>}
	rv = 0
#10 0xb7a06f88 in NS_ProcessNextEvent_P (thread=0x3, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#11 0xb7a36cd3 in nsThread::ThreadFunc (arg=0x8e01180) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#12 0xb7d171e1 in _pt_root (arg=0x8e01388) at ptthread.c:221
	detached = 0
#13 0xb806a50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#14 0xb7ebe7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 7 (Thread 0xb52f2b90 (LWP 21052)):
#0  0xb80b8430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb806e3a2 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d0ff9e in pt_TimedWait (cv=0x8d89434, ml=0x8d99c88, timeout=1924)
    at ptsynch.c:280
	rv = 10382645
	now = {tv_sec = 1226325439, tv_usec = 802162}
	tmo = {tv_sec = 1226325441, tv_nsec = 726162000}
	ticks = 1000
#3  0xb7d10dc0 in PR_WaitCondVar (cvar=0x8d89430, timeout=1924)
    at ptsynch.c:407
	rv = <value optimized out>
	thred = <value optimized out>
#4  0xb7a394bc in TimerThread::Run (this=0x8d99e28) at TimerThread.cpp:345
	waitFor = 4294966780
#5  0xb7a3656c in nsThread::ProcessNextEvent (this=0x8ea7ec0, mayWait=1, 
    result=0xb52f2344) at nsThread.cpp:510
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x8d99e28}, <No data fields>}
	rv = 0
#6  0xb7a06f88 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#7  0xb7a36cd3 in nsThread::ThreadFunc (arg=0x8ea7ec0) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8  0xb7d171e1 in _pt_root (arg=0x8ea80c8) at ptthread.c:221
	detached = 0
#9  0xb806a50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7ebe7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 6 (Thread 0xb498bb90 (LWP 21056)):
#0  0xb80b8430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb806e075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d10e39 in PR_WaitCondVar (cvar=0x91b1b78, timeout=4294967295)
    at ptsynch.c:405
	rv = <value optimized out>
	thred = (PRThread *) 0x91b1bb8
#3  0xb783f266 in nsSSLThread::Run (this=0x91b1af0) at nsSSLThread.cpp:964
	threadLock = {<nsAutoLockBase> = {<No data fields>}, 
  mLock = 0x91b1b18, mLocked = 1}
	pending_work = <value optimized out>
	busy_socket_ssl_state = nsSSLSocketThreadData::ssl_reading_done
	needToSetPollableEvent = 1
	socketToDestroy = (class nsNSSSocketInfo *) 0x1
#4  0xb783eb9a in nsPSMBackgroundThread::nsThreadRunner (arg=0x91b1af0)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5  0xb7d171e1 in _pt_root (arg=0x91b1bb8) at ptthread.c:221
	detached = 0
#6  0xb806a50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb7ebe7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 5 (Thread 0xb391db90 (LWP 21057)):
#0  0xb80b8430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb806e075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d10e39 in PR_WaitCondVar (cvar=0x91b1d48, timeout=4294967295)
    at ptsynch.c:405
	rv = <value optimized out>
	thred = (PRThread *) 0x91b1d88
#3  0xb78402fe in nsCertVerificationThread::Run (this=0x91b1c98)
    at nsCertVerificationThread.cpp:138
No locals.
#4  0xb783eb9a in nsPSMBackgroundThread::nsThreadRunner (arg=0x91b1c98)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5  0xb7d171e1 in _pt_root (arg=0x91b1d88) at ptthread.c:221
	detached = 0
#6  0xb806a50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb7ebe7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 3 (Thread 0xb0e31b90 (LWP 21076)):
#0  0xb80b8430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb806e075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d10e39 in PR_WaitCondVar (cvar=0x9881760, timeout=4294967295)
    at ptsynch.c:405
	rv = <value optimized out>
	thred = (PRThread *) 0x98818d8
#3  0xb7d10eb7 in PR_Wait (mon=0x98817a0, timeout=4294967295) at ptsynch.c:584
	rv = -512
	saved_entries = 1
	saved_owner = 2967673744
#4  0xb7a35791 in nsEventQueue::GetEvent (this=0x98816d8, mayWait=1, 
    result=0xb0e31304) at ../../dist/include/xpcom/nsAutoLock.h:340
No locals.
#5  0xb7a36540 in nsThread::ProcessNextEvent (this=0x98816b8, mayWait=1, 
    result=0xb0e31344) at nsThread.h:112
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	rv = 3072907621
#6  0xb7a06f88 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#7  0xb7a36cd3 in nsThread::ThreadFunc (arg=0x98816b8) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8  0xb7d171e1 in _pt_root (arg=0x98818d8) at ptthread.c:221
	detached = 0
#9  0xb806a50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7ebe7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 1 (Thread 0xb7ddb6c0 (LWP 21047)):
#0  GCGraphBuilder::AddNode (this=0xbfeb05dc, s=0x9bcbda0, 
    aParticipant=0x8e0f39c) at nsCycleCollector.cpp:1287
	e = (PtrToNodeEntry *) 0x0
	result = <value optimized out>
#1  0xb7a41401 in GCGraphBuilder::NoteScriptChild (this=0xbfeb05dc, langID=2, 
    child=0x9bcbda0) at nsCycleCollector.cpp:1237
	cp = (class nsCycleCollectionParticipant *) 0x0
	childPi = <value optimized out>
#2  0xb728f6b0 in NoteJSChild (trc=0x1aab8568, thing=0x9bcbda0, kind=0)
    at nsXPConnect.cpp:744
No locals.
#3  0xb7d78df9 in JS_CallTracer (trc=0xbfeb0530, thing=0x9bcbda0, kind=0)
    at jsgc.c:2449
	cx = <value optimized out>
	rt = (JSRuntime *) 0xbfeb0478
	a = <value optimized out>
	index = <value optimized out>
	flagp = <value optimized out>
#4  0xb7db7297 in js_TraceScopeProperty (trc=0xbfeb0530, sprop=0x9ba4e38)
    at jsscope.c:1573
No locals.
#5  0xb7d8edfa in js_TraceObject (trc=0xbfeb0530, obj=0x9bcbd80)
    at jsobj.c:5048
	cx = (JSContext *) 0x90698f8
	scope = (JSScope *) 0x9bcf0d0
	sprop = (JSScopeProperty *) 0x9ba4e38
	clasp = <value optimized out>
	nslots = 3219850504
	i = <value optimized out>
	v = <value optimized out>
#6  0xb7d78bba in JS_TraceChildren (trc=0xbfeb0530, thing=0x9bcbd80, kind=0)
    at jsgc.c:2233
	nslots = <value optimized out>
	i = <value optimized out>
	v = <value optimized out>
#7  0xb728f770 in nsXPConnect::Traverse (this=0x8e0f388, p=0x9bcbd80, 
    cb=@0xbfeb05dc) at nsXPConnect.cpp:935
	cx = (JSContext *) 0x90698f8
	traceKind = 0
	type = <value optimized out>
	trc = {<JSTracer> = {context = 0x90698f8, 
    callback = 0xb728f686 <NoteJSChild>}, cb = @0xbfeb05dc}
	clazz = <value optimized out>
#8  0xb7a40c84 in GCGraphBuilder::Traverse (this=0xbfeb05dc, 
    aPtrInfo=0xa50e643c) at nsCycleCollector.cpp:1319
	rv = <value optimized out>
#9  0xb7a40ce7 in nsCycleCollector::MarkRoots (this=0x8daf700, 
    builder=@0xbfeb05dc) at nsCycleCollector.cpp:1513
No locals.
#10 0xb7a41795 in nsCycleCollector::BeginCollection (this=0x8daf700)
    at nsCycleCollector.cpp:2368
	builder = {<nsCycleCollectionTraversalCallback> = {
    _vptr.nsCycleCollectionTraversalCallback = 0xb7cc2f20}, mNodeBuilder = {
    mNextBlock = 0xa502f360, mNext = @0x8daf744, mBlockEnd = 0xa50ef364}, 
  mEdgeBuilder = {mCurrent = 0x1aa46240, mBlockEnd = 0x1aa78558, 
    mNextBlockPtr = 0x1aa7855c}, mPtrToNodeMap = {ops = 0xb7cdb82c, 
    data = 0x0, hashShift = 16, maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@', 
    entrySize = 8, entryCount = 65535, removedCount = 0, generation = 1, 
    entryStore = 0xb20be008 ";�v�\004\032\003���\001"}, mCurrPi = 0xa50e643c, 
  mRuntimes = 0x8daf710}
#11 0xb7a417d8 in nsCycleCollector_beginCollection ()
    at nsCycleCollector.cpp:2910
No locals.
#12 0xb72906cc in XPCCycleCollectGCCallback (cx=0x90698f8, 
    status=JSGC_MARK_END) at nsXPConnect.cpp:440
	ok = <value optimized out>
#13 0xb7d79d7a in js_GC (cx=0x90698f8, gckind=GC_NORMAL) at jsgc.c:3239
	rt = (JSRuntime *) 0x8e10d30
	keepAtoms = 0
	callback = <value optimized out>
	i = 309396268
	type = <value optimized out>
	trc = {context = 0x90698f8, callback = 0}
	thingSize = 151427320
	a = <value optimized out>
	ap = (JSGCArenaInfo **) 0x8e10db4
	emptyArenas = (JSGCArenaInfo *) 0x8e10b4c
	flags = <value optimized out>
	flagp = (uint8 *) 0x8e10b48 ""
	thing = <value optimized out>
	freeList = (JSGCThing *) 0xbfeb06e8
	arenaList = (JSGCArenaList *) 0xb7d10f30
	allClear = 148966220
	requestDebit = 1
	acx = <value optimized out>
	iter = (JSContext *) 0x0
#14 0xb7d5663a in JS_GC (cx=0x90698f8) at jsapi.c:2469
No locals.
#15 0xb728f950 in nsXPConnect::Collect (this=0x8e0f388) at nsXPConnect.cpp:529
	cycleCollectionContext = {<nsAXPCNativeCallContext> = {
    _vptr.nsAXPCNativeCallContext = 0xb7c0f8a8}, 
  mState = XPCCallContext::HAVE_CONTEXT, mXPC = 0x8e0f388, 
  mThreadData = 0x8e10c18, mXPCContext = 0x9069ac0, mJSContext = 0x90698f8, 
  mContextPopRequired = 1, mDestroyJSContextInDestructor = 0, 
  mCallerLanguage = XPCContext::LANG_NATIVE, 
  mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, mPrevCallContext = 0x0, 
  mOperandJSObject = 0xf519f85a, mCurrentJSObject = 0xb7ad6ebe, 
  mFlattenedJSObject = 0x7a, mWrapper = 0xb7a0569f, mTearOff = 0x19, 
  mScriptableInfo = 0xb7cc4ff4, mSet = 0xbfeb0838, mInterface = 0xb7a109ae, 
  mMember = 0x0, mName = 148904820, mStaticMemberIsLocal = -1075115960, 
  mArgc = 3080720332, mArgv = 0x0, mRetVal = 0xb7ad6ebe, 
  mExceptionWasThrown = -1213466476, mReturnValueWasSet = 446822960, 
  mMethodIndex = 7028, mCallee = 0x0, 
\000\000\000"}
	cx = (JSContext *) 0x90698f8
#16 0xb7a418fa in nsCycleCollector::Collect (this=0x8daf700, aTryCollections=1)
    at nsCycleCollector.cpp:2250
	collected = -1075115848
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x8e01b68}, <No data fields>}
	whiteNodes = {<nsTPtrArray<PtrInfo>> = {<nsTArray<PtrInfo*>> = {<nsTArray_base> = {static sEmptyHdr = {mLength = 0, mCapacity = 0, mIsAutoArray = 0}, 
        mHdr = 0xbfeb08a0}, <No data fields>}, <No data fields>}, 
  mAutoBuf = "\000\000\000\000�\017\000\200�\b��\001\000\000\000��a\030\000\000\000\000�\b��,;c���a\030\001\000\000\000\001\000\000\000\000\000\000\000�\207_\023\234p\226\030�\b��\001\000\000\000�R\000\000P\t��\b\t��><c��M�\025\001\000\000\000\001\000\000\000\000\000\000\000\003\000\000\000\003\000\000\000H\t��C$A�ܫF\026D\t��\000\000\000\000$��\b\000\000\000\000\000\000\000\000X\t���R\000\000@E�\023\234��\bP\t��@E�\023\204\003\000\000�~�\030h\t��\231'A��~�\030h�F\026$��\b�Z@��O̷\004\000\000\000"...}
	totalCollections = 0
#17 0xb7a41a39 in nsCycleCollector_collect () at nsCycleCollector.cpp:2898
No locals.
#18 0xb763cf42 in nsJSContext::CC () at nsJSEnvironment.cpp:3346
No locals.
#19 0xb763d1fa in nsJSContext::Notify (this=0x1621ab20, timer=0xa51ba940)
    at nsJSEnvironment.cpp:3438
No locals.
#20 0xb7a38a42 in nsTimerImpl::Fire (this=0xa51ba940) at nsTimerImpl.cpp:403
	now = 2259760353
	timeout = <value optimized out>
	callback = {c = 0x1621ab28, i = 0x1621ab28, o = 0x1621ab28}
	callbackType = 1
#21 0xb7a38ab7 in nsTimerEvent::Run (this=0xb27ea5b8) at nsTimerImpl.cpp:490
No locals.
#22 0xb7a3656c in nsThread::ProcessNextEvent (this=0x8d89700, mayWait=1, 
    result=0xbfeb4834) at nsThread.cpp:510
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x8e3005c}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0xb27ea5b8}, <No data fields>}
	rv = 0
#23 0xb7a06f88 in NS_ProcessNextEvent_P (thread=0x1aab8568, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#24 0xb798a2c4 in nsBaseAppShell::Run (this=0x8e30058)
    at nsBaseAppShell.cpp:170
	thread = (class nsIThread *) 0x8d89700
#25 0xb781fab8 in nsAppStartup::Run (this=0x8e62c70) at nsAppStartup.cpp:181
	rv = <value optimized out>
#26 0xb7284508 in XRE_main (argc=2, argv=0xbfeb7f94, aAppData=0x8d14830)
    at nsAppRunner.cpp:3194
	obsService = {<nsCOMPtr_base> = {
    mRawPtr = 0x8e01b68}, <No data fields>}
	remoteService = {<nsCOMPtr_base> = {
    mRawPtr = 0x920cc18}, <No data fields>}
	appStartup = {<nsCOMPtr_base> = {
    mRawPtr = 0x8e62c70}, <No data fields>}
	workingDir = {<nsCOMPtr_base> = {
    mRawPtr = 0x8fa6cd8}, <No data fields>}
	chromeObserver = {<nsCOMPtr_base> = {
    mRawPtr = 0x8ddb9d0}, <No data fields>}
	cmdLine = {<nsCOMPtr_base> = {mRawPtr = 0x8fa6100}, <No data fields>}
	noEMRestart = <value optimized out>
	xpcom = {mServiceManager = 0x8da1d7c}
	desktopStartupIDEnv = <value optimized out>
	desktopStartupID = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbfeb4ca8 "", 
        mLength = 0, mFlags = 65553}, <No data fields>}, mFixedCapacity = 63, 
    mFixedBuf = 0xbfeb4ca8 ""}, 
  mStorage = "\000L��\n\006��PJ�\b��\004\b�L�������M��\001\000\000\000a�����\004\bTH�\b�M���L뿬�\004\b�M��\000\000\000"}
	xremotearg = <value optimized out>
	upgraded = 0
	appInitiatedRestart = <value optimized out>
	dirProvider = {<nsIDirectoryServiceProvider2> = {<nsIDirectoryServiceProvider> = {<nsISupports> = {
        _vptr.nsISupports = 0xb7c0f108}, <No data fields>}, <No data fields>}, <nsIProfileStartup> = {<nsISupports> = {
      _vptr.nsISupports = 0xb7c0f12c}, <No data fields>}, 
  mAppProvider = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, 
  mGREDir = {<nsCOMPtr_base> = {mRawPtr = 0x8d14a50}, <No data fields>}, 
  mSysPluginDir = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, 
  mXULAppDir = {<nsCOMPtr_base> = {mRawPtr = 0x8d149b0}, <No data fields>}, 
  mProfileDir = {<nsCOMPtr_base> = {mRawPtr = 0x8d89520}, <No data fields>}, 
  mProfileLocalDir = {<nsCOMPtr_base> = {
      mRawPtr = 0x8d89598}, <No data fields>}, mProfileNotified = 1 '\001', 
  mExtensionsLoaded = 1 '\001', mAppBundleDirectories = {<nsCOMArray_base> = {
      mArray = {mImpl = 0x0}}, <No data fields>}, 
  mExtensionDirectories = {<nsCOMArray_base> = {mArray = {
        mImpl = 0x8dbff28}}, <No data fields>}, 
  mThemeDirectories = {<nsCOMArray_base> = {mArray = {
        mImpl = 0x8dc0110}}, <No data fields>}}
	display = (GdkDisplay *) 0x8d4b028
	nativeApp = {<nsCOMPtr_base> = {mRawPtr = 0x8d5a888}, <No data fields>}
	desktopStartupIDPtr = 0x0
	startOffline = 0
	profLD = {<nsCOMPtr_base> = {mRawPtr = 0x8d89598}, <No data fields>}
	profD = {<nsCOMPtr_base> = {mRawPtr = 0x8d89520}, <No data fields>}
	needsRestart = 0
	canRun = 1
	profileLock = {<nsCOMPtr_base> = {
    mRawPtr = 0x8d99c18}, <No data fields>}
	profileName = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0x8d99c08 "default", 
        mLength = 7, mFlags = 65541}, <No data fields>}, mFixedCapacity = 63, 
    mFixedBuf = 0xbfeb4c54 ""}, 
  mStorage = "\000L��e\b��@\201��t\000\000\000@\201��\210L���\177\005�t\000\000\000�M뿨L��}\036зXJ�\b�O̷�L�� ܢ�XJ�\b"}
	version = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, 
        mData = 0xbfeb4c00 "3.0.3_2008101315/2008101315", mLength = 27, 
        mFlags = 65553}, <No data fields>}, mFixedCapacity = 63, 
    mFixedBuf = 0xbfeb4c00 "3.0.3_2008101315/2008101315"}, 
  mStorage = "3.0.3_2008101315/2008101315\000HJ�\b�I�\b�M��\002\000\000\000\000\000\000\000�I�\b�O̷XL�� ܢ�"}
	osABI = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xb7abf2ee "Linux_x86-gcc3", mLength = 14, 
      mFlags = 1}, <No data fields>}, <No data fields>}
	versionOK = <value optimized out>
	rv = 0
	ar = <value optimized out>
	gtkModules = <value optimized out>
	override = 0x0
	appData = {<nsXREAppData> = {size = 56, directory = 0x8d149b0, 
    vendor = 0x8d152f0 "Mozilla", name = 0x8d152d0 "Firefox", 
    version = 0x8d152e0 "3.0.3", buildID = 0x8d05c10 "2008101315", 
    ID = 0x8d14af0 "{ec8030f7-c20a-464f-9b0e-13a3a9e97384}", 
    copyright = 0x8d14b20 "Copyright (c) 1998 - 2008 mozilla.org", flags = 6, 
    xreDirectory = 0x8d14a50, minVersion = 0x8d05c20 "1.9.0.1", 
    maxVersion = 0x8d05c30 "1.9.0.*", 
    crashReporterURL = 0x8d14b50 "https://crash-reports.mozilla.com/submit", 
    profile = 0x0}, <No data fields>}
	iniFile = {<nsCOMPtr_base> = {mRawPtr = 0x8d14b80}, <No data fields>}
	localIniFile = {<nsCOMPtr_base> = {
    mRawPtr = 0x8d14b80}, <No data fields>}
	parser = {
  mSections = {<nsBaseHashtable<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue>, nsINIParser_internal::INIValue*>> = {<nsTHashtable<nsBaseHashtableET<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue> > >> = {
        mTable = {ops = 0xb7cdb5c0, data = 0x0, hashShift = 28, 
          maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@', entrySize = 12, 
          entryCount = 1, removedCount = 0, generation = 0, 
          entryStore = 0x8d14d60 ""}}, <No data fields>}, <No data fields>}, 
  mFileContents = {mRawPtr = 0x8d14e28 "[Build"}}
	i = <value optimized out>
#27 0x080491ab in ?? ()
No symbol table info available.
#28 0xb7df3685 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#29 0x08048d11 in ?? ()
No symbol table info available.

So now that we know it's not any extensions causing this I am going to go re-enable a minimal set so that i don't keep losing all of my open work every time this crashes.

Can you please advise what our next steps are?