[Bug 29102] New: HTML-Kit 292 crashes on loading a page in the internal web browser

http://bugs.winehq.org/show_bug.cgi?id=29102

Bug #: 29102
           Summary: HTML-Kit 292 crashes on loading a page in the internal
                    web browser
           Product: Wine
           Version: 1.3.32
          Platform: x86-64
               URL: http://www.chami.com/html-kit/download/
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: mshtml
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
                CC: [e-mail]
    Classification: Unclassified

Created attachment 37505
  --> http://bugs.winehq.org/attachment.cgi?id=37505
Terminal output with debug gecko, and backtrace without it

As soon as an attempt is made to load a page in HTML-Kit 292's internal
browser, it crashes. To reproduce, start the program (decline all first-run
options and don't create/open any file) and choose the online tab, then type in
www.winehq.org -> enter. It may show a quick glimpse of the page, but the
program window quickly disappears to be replaced by a crash dialog.

This is a regression, and regression testing resulted in:

f86abedb40417c358f6ba85f51f6d6544c90bd73 is the first bad commit
commit f86abedb40417c358f6ba85f51f6d6544c90bd73
Author: Jacek Caban 
Date:   Tue Nov 15 13:29:59 2011 +0100

mshtml: Properly handle navigation in containers supporting IWebBrowserApp.

:040000 040000 56e06f39977809049c9edeab378892ec3cb96694
0d096fc2265aaae98df81a4ff06c0d81ce46277d M    dlls

Reverting the patch fixed the problem.

I was only able to get a backtrace for this manually, after setting
$BreakOnFirstChance=1 and using the non-debug build of wine-gecko.