The stacktrace shows clearly what happens. A menu is removing its menupopup in a popuphiding handler, which then causes a null ptr deref when we go to fire the popuphidden event. This should be a trivial fix.
If you scrub through all of the menus with the mouse, does a particular submenu cause the crash when it closes? I'd be interested to know which menu actually triggers this. I don't think anything in Firefox actually does it.
The stacktrace shows clearly what happens. A menu is removing its menupopup in a popuphiding handler, which then causes a null ptr deref when we go to fire the popuphidden event. This should be a trivial fix.
If you scrub through all of the menus with the mouse, does a particular submenu cause the crash when it closes? I'd be interested to know which menu actually triggers this. I don't think anything in Firefox actually does it.