--- stack trace ---
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb7dc6651 in raise () from /lib/tls/i686/cmov/libpthread.so.0
#2  0x080577f6 in nsProfileLock::FatalSignalHandler (signo=11)
    at nsProfileLock.cpp:206
	unblock_sigs = {__val = {1024, 0 <repeats 31 times>}}
	oldact = <value optimized out>
#3  <signal handler called>
#4  0xb585c204 in nsTextControlFrame::SetValue (this=0x91de048, 
    aValue=@0x9006650) at nsTextControlFrame.cpp:3184
	domDoc = {<nsCOMPtr_base> = {mRawPtr = 0x9075954}, <No data fields>}
	rv = <value optimized out>
	domSel = {<nsCOMPtr_base> = {mRawPtr = 0x91ded20}, <No data fields>}
	selPriv = {<nsCOMPtr_base> = {mRawPtr = 0x91ded24}, <No data fields>}
	htmlEditor = {<nsCOMPtr_base> = {
    mRawPtr = 0x91dec3c}, <No data fields>}
	savedFlags = 515
	stack = {<nsCOMPtr_base> = {mRawPtr = 0x80e48b8}, <No data fields>}
	currentValue = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7eb7668, mData = 0xbfde3d44, mLength = 6, 
          mFlags = 65553}, <No data fields>}, <No data fields>}, 
    mFixedCapacity = 63, mFixedBuf = 0xbfde3d44}, mStorage = {71, 111, 111, 
    103, 108, 101, 0, 46527, 15796, 49118, 28529, 46496, 26904, 2328, 26912, 
    2328, 32632, 47083, 57160, 46527, 57524, 2333, 15760, 49118, 22067, 47075, 
    26840, 2328, 57160, 46527, 15796, 49118, 3256, 46535, 22736, 2311, 15844, 
    49118, 15808, 49118, 22261, 47075, 44100, 2314, 15844, 49118, 15792, 
    49118, 28497, 46496, 26840, 2328, 26840, 2328, 15808, 49118, 22180, 47075, 
    26840, 2328, 15844, 49118, 15856, 49118}}
#5  0xb585c404 in nsTextControlFrame::SetProperty (this=0x91de048, 
    aPresContext=0x8d11490, aName=0x80992d0, aValue=@0x9006650)
    at nsTextControlFrame.cpp:2347
No locals.
#6  0xb5a0bbfb in nsHTMLInputElement::SetValueInternal (this=0x91868d8, 
    aValue=@0x9006650, aFrame=0x0) at nsHTMLInputElement.cpp:817
	presContext = {<nsCOMPtr_base> = {
    mRawPtr = 0x8d11490}, <No data fields>}
	textControlFrame = (class nsITextControlFrame *) 0x91de0b4
	formControlFrame = (class nsIFormControlFrame *) 0x91de0b4
	frameOwnsValue = 1
#7  0xb5a0c28a in nsHTMLInputElement::SetValue (this=0x91868d8, 
    aValue=@0x9006650) at nsHTMLInputElement.cpp:741
No locals.
#8  0xb7e99bb9 in XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
No locals.
#9  0xb6858ea4 in XPCWrappedNative::CallMethod (ccx=@0xbfde4128, 
    mode=XPCWrappedNative::CALL_SETTER) at xpcwrappednative.cpp:2169
	dp = <value optimized out>
	_automarker_2197 = {<AutoMarkingPtr> = {
    _vptr.AutoMarkingPtr = 0xb7f1369a, mNext = 0x91db898, mTLS = 0x80e45f8}, 
  mPtr = 0x8533ead}
	array_count = <value optimized out>
	datum_type = {<XPTTypeDescriptorPrefix> = {
    flags = 15 '\017'}, <No data fields>}
	isArray = <value optimized out>
	v = <value optimized out>
	_val_2197 = {mVal = -1208596676, mValPtr = 0x1}
	isSizedString = <value optimized out>
	rv = <value optimized out>
	paramBuffer = {{<nsXPTCMiniVariant> = {val = {i8 = 80 'P', 
        i16 = 26192, i32 = 151021136, i64 = 647801464911062608, u8 = 80 'P', 
        u16 = 26192, u32 = 151021136, u64 = 647801464911062608, 
        f = 1.54555467e-33, d = 2.2835746934254482e-265, b = 151021136, 
        c = 80 'P', wc = 26192, p = 0x9006650}}, ptr = 0x8ab0438, 
    type = {<XPTTypeDescriptorPrefix> = {flags = 175 '¯'}, <No data fields>}, 
    flags = 16 '\020'}, {<nsXPTCMiniVariant> = {val = {i8 = 76 'L', 
        i16 = -15028, i32 = -1210071732, i64 = 580478645754119500, 
        u8 = 76 'L', u16 = 50508, u32 = 3084895564, u64 = 580478645754119500, 
        f = -2.66755451e-05, d = 7.163244941503152e-270, b = -1210071732, 
        c = 76 'L', wc = 50508, p = 0xb7dfc54c}}, ptr = 0x8c89918, 
    type = {<XPTTypeDescriptorPrefix> = {flags = 52 '4'}, <No data fields>}, 
    flags = 64 '@'}, {<nsXPTCMiniVariant> = {val = {i8 = 28 '\034', i16 = 28, 
        i32 = 28, i64 = -8437477581002899428, u8 = 28 '\034', u16 = 28, 
        u32 = 28, u64 = 10009266492706652188, f = 3.9236357e-44, 
        d = -4.0056492624386099e-256, b = 28, c = 28 '\034', wc = 28, 
        p = 0x1c}}, ptr = 0xbfde40e8, type = {<XPTTypeDescriptorPrefix> = {
        flags = 0 '\0'}, <No data fields>}, flags = 116 't'}, 
  {<nsXPTCMiniVariant> = {val = {i8 = 60 '<', i16 = 18236, i32 = -1208596676, 
        i64 = 123345454908, u8 = 60 '<', u16 = 18236, u32 = 3086370620, 
        u64 = 123345454908, f = -2.93586563e-05, d = 6.0940751840703373e-313, 
        b = -1208596676, c = 60 '<', wc = 18236, p = 0xb7f6473c}}, ptr = 0x1, 
    type = {<XPTTypeDescriptorPrefix> = {flags = 64 '@'}, <No data fields>}, 
    flags = 125 '}'}, {<nsXPTCMiniVariant> = {val = {i8 = 33 '!', 
        i16 = -23775, i32 = -1209031903, i64 = 71805412129, u8 = 33 '!', 
        u16 = 41761, u32 = 3085935393, u64 = 71805412129, f = -2.8566983e-05, 
        d = 3.5476587318411263e-313, b = -1209031903, c = 33 '!', wc = 41761, 
        p = 0xb7efa321}}, ptr = 0xb7dc13f7, 
    type = {<XPTTypeDescriptorPrefix> = {flags = 116 't'}, <No data fields>}, 
    flags = 64 '@'}, {<nsXPTCMiniVariant> = {val = {i8 = 23 '\027', 
        i16 = 6935, i32 = -1209132265, i64 = 7380802327, u8 = 23 '\027', 
        u16 = 6935, u32 = 3085835031, u64 = 7380802327, f = -2.83844256e-05, 
        d = 3.6466008685158304e-314, b = -1209132265, c = 23 '\027', 
        wc = 6935, p = 0xb7ee1b17}}, ptr = 0xbfde40e8, 
    type = {<XPTTypeDescriptorPrefix> = {flags = 217 'Ù'}, <No data fields>}, 
    flags = 28 '\034'}, {<nsXPTCMiniVariant> = {val = {i8 = 4 '\004', 
        i16 = -15356, i32 = -1209220092, i64 = -5197218511668329468, 
        u8 = 4 '\004', u16 = 50180, u32 = 3085747204, 
        u64 = 13249525562041222148, f = -2.82246692e-05, 
        d = -1.4588390852529231e-39, b = -1209220092, c = 4 '\004', 
        wc = 50180, p = 0xb7ecc404}}, ptr = 0x2, 
    type = {<XPTTypeDescriptorPrefix> = {
        flags = 132 '\204'}, <No data fields>}, flags = 64 '@'}, 
  {<nsXPTCMiniVariant> = {val = {i8 = -40 'Ø', i16 = 10712, i32 = -1210111528, 
        i64 = 7379823064, u8 = 216 'Ø', u16 = 10712, u32 = 3084855768, 
        u64 = 7379823064, f = -2.66031566e-05, d = 3.6461170483092869e-314, 
        b = -1210111528, c = -40 'Ø', wc = 10712, p = 0xb7df29d8}}, 
    ptr = 0x9187768, type = {<XPTTypeDescriptorPrefix> = {
        flags = 32 ' '}, <No data fields>}, flags = 155 '\233'}}
	autoStrings = {
  {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {
            mVTable = 0xb7eb7668, mData = 0xbfde3f78, mLength = 0, 
            mFlags = 65553}, <No data fields>}, <No data fields>}, 
      mFixedCapacity = 63, mFixedBuf = 0xbfde3f78}, mStorage = {0, 47084, 
      9416, 2091, 34832, 2093, 6, 0, 21364, 47089, 16296, 49118, 52600, 2094, 
      16356, 49118, 32614, 47089, 9416, 2091, 34832, 2093, 1, 0, 16336, 49118, 
      59600, 46706, 57408, 46704, 9416, 2091, 52600, 2094, 6, 0, 61672, 2068, 
      16356, 49118, 23653, 47089, 9416, 2091, 34856, 2093, 61672, 2068, 18236, 
      47094, 9416, 2091, 5111, 47068, 16436, 49118, 41335, 47087, 9416, 2091, 
      1080, 2219, 16452, 49118}}}
	autoStringIndex = 0
	retval = 0
	dispatchParams = (nsXPTCVariant *) 0xbfde3ff8
	i = 191 '¿'
	methodInfo = (const nsXPTMethodInfo *) 0xb6718a88
	requiredArgs = <value optimized out>
	paramCount = 1 '\001'
	src = 142347348
	invokeResult = <value optimized out>
	param_iid = {m0 = 1, m1 = 29794, m2 = 47085, 
  m3 = "\204\230\035\t­>S\b"}
	err = <value optimized out>
	sm = <value optimized out>
	foundDependentParam = 0
	rt = (XPCJSRuntime *) 0x80e2de0
	callee = (nsISupports *) 0x9186918
	tls = <value optimized out>
	vtblIndex = 88
	ifaceInfo = (class nsIInterfaceInfo *) 0x8536150
	name = 135579356
	argv = (jsval *) 0x91d50f4
	secAction = <value optimized out>
#10 0xb685f60c in XPC_WN_GetterSetter (cx=0x8d104b8, obj=0x91db898, argc=1, 
    argv=0x91d50f4, vp=0xbfde424c) at xpcprivate.h:1962
	retval = <value optimized out>
	funobj = (JSObject *) 0x87c0c40
	ccx = {<nsIXPCNativeCallContext> = {<nsISupports> = {
      _vptr.nsISupports = 0xb686f3e8}, <No data fields>}, mRefCnt = {
    mValue = 0}, mState = XPCCallContext::READY_TO_CALL, mXPC = 0x80e2d98, 
  mThreadData = 0x80e45c0, mXPCContext = 0x91967b0, mJSContext = 0x8d104b8, 
  mContextPopRequired = 0, mDestroyJSContextInDestructor = 0, 
  mCallerLanguage = XPCContext::LANG_JS, 
  mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, 
  mPrevCallContext = 0xbfde5a2c, mOperandJSObject = 0x91db898, 
  mCurrentJSObject = 0x91db898, mFlattenedJSObject = 0x91db898, 
  mWrapper = 0x9187680, mTearOff = 0x918769c, mScriptableInfo = 0x9166670, 
  mSet = 0x8685208, mInterface = 0x8533bb8, mMember = 0x8533eac, 
  mName = 135579356, mStaticMemberIsLocal = 152941440, mArgc = 1, 
  mArgv = 0x91d50f4, mRetVal = 0xbfde424c, mExceptionWasThrown = 0, 
  mReturnValueWasSet = 0, mMethodIndex = 88, mCallee = 0x0}
	wrapper = <value optimized out>
	iface = (XPCNativeInterface *) 0x8533bb8
	member = (XPCNativeMember *) 0x8533eac
#11 0xb7efcb25 in js_Invoke (cx=0x8d104b8, argc=1, flags=2) at jsinterp.c:1375
	mark = (void *) 0x91d50f8
	fp = (JSStackFrame *) 0xbfde466c
	frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, 
  fun = 0x8c89948, thisp = 0x91db898, argc = 1, argv = 0x91d50f4, 
  rval = -2147483647, nvars = 0, vars = 0x91d50f8, down = 0xbfde466c, 
  annotation = 0x0, scopeChain = 0x8d0bef0, pc = 0x0, sp = 0x91d50f8, 
  spbase = 0x0, sharpDepth = 0, sharpArray = 0x0, flags = 2, 
  dormantNext = 0x0, xmlNamespace = 0x0, blockChain = 0x0}
	sp = <value optimized out>
	newsp = <value optimized out>
	vp = (jsval *) 0x91d50ec
	v = 142347328
	thisv = 152942744
	funobj = <value optimized out>
	parent = (JSObject *) 0x91db380
	thisp = <value optimized out>
	ok = 135153088
	clasp = <value optimized out>
	ops = (JSObjectOps *) 0x1
	native = (
    JSNative) 0xb685f4b0 <XPC_WN_GetterSetter(JSContext*, JSObject*, unsigned int, long*, long*)>
	fun = (JSFunction *) 0x8c89948
	script = (JSScript *) 0x0
	nslots = 0
	nvars = <value optimized out>
	nalloc = <value optimized out>
	hook = (JSInterpreterHook) 0
	hookData = (void *) 0x0
#12 0xb7f0d03d in js_InternalInvoke (cx=0x8d104b8, obj=0x91db898, 
    fval=142347328, flags=2, argc=1, argv=0xbfde45b4, rval=0xbfde45b4)
    at jsinterp.c:1469
	fp = (JSStackFrame *) 0xbfde466c
	oldfp = (JSStackFrame *) 0xbfde466c
	frame = {callobj = 0xb7ee17a3, argsobj = 0x8fd7400, 
  varobj = 0x8ab0438, script = 0xbfde4314, fun = 0xb7ed8c36, 
  thisp = 0x8fd7400, argc = 152941440, argv = 0xbfde4314, rval = -1209168908, 
  nvars = 150828032, vars = 0x8ab0438, down = 0x0, annotation = 0xb7f6473c, 
  scopeChain = 0xb7f6473c, pc = 0x912e56c "è'\025\b@\f|\b@\f|\bÿÿÿÿq", 
  sp = 0xbfde4374, spbase = 0xb7ecc404, sharpDepth = 147915960, 
  sharpArray = 0xbfde4358, flags = 1, dormantNext = 0x8ab0438, 
  xmlNamespace = 0x1, blockChain = 0x91257d8}
	oldsp = (jsval *) 0x91d50d8
	sp = <value optimized out>
	mark = <value optimized out>
	i = <value optimized out>
	ok = <value optimized out>
#13 0xb7f0d165 in js_InternalGetOrSet (cx=0x8d104b8, obj=0x91db898, 
    id=135604200, fval=515, mode=JSACC_WRITE, argc=1, argv=0xbfde45b4, 
    rval=0xbfde45b4) at jsinterp.c:1540
	stackDummy = 135604200
#14 0xb7f16e06 in js_SetProperty (cx=0x8d104b8, obj=0x91db898, id=135604200, 
    vp=0xbfde45b4) at jsobj.c:3655
	pobj = (JSObject *) 0x91db380
	prop = (JSProperty *) 0x912e56c
	sprop = (JSScopeProperty *) 0x912e56c
	scope = (JSScope *) 0x9166698
	attrs = <value optimized out>
	flags = <value optimized out>
	shortid = <value optimized out>
	clasp = (JSClass *) 0x86850e4
	getter = (JSPropertyOp) 0xb7ec9240 <JS_PropertyStub>
	setter = (JSPropertyOp) 0xb685f240 <XPC_WN_Helper_SetProperty>
#15 0xb7f08d97 in js_Interpret (cx=0x8d104b8, pc=0x0, result=0xbfde46e4)
    at jsinterp.c:3704
	cache_ = (JSPropertyCache *) 0x8109e84
	pce_sprop_ = (JSScopeProperty *) 0x0
	scope_ = (JSScope *) 0x8109e84
	rt = (JSRuntime *) 0x8109b20
	fp = (JSStackFrame *) 0xbfde466c
	script = (JSScript *) 0x8532728
	inlineCallCount = 0
	obj = (JSObject *) 0x91db898
	obj2 = (JSObject *) 0x8d104b8
	parent = <value optimized out>
	currentVersion = <value optimized out>
	originalVersion = JSVERSION_DEFAULT
	onbranch = (
    JSBranchCallback) 0xb5abcac0 <nsJSContext::DOMBranchCallback(JSContext*, JSScript*)>
	ok = 1
	cond = -1075952140
	interruptHandler = (JSTrapHandler) 0
	depth = 5
	len = $2 = -99
.