http://bugs.winehq.org/show_bug.cgi?id=27340
--- Comment #5 from rankincj@yahoo.com 2011-06-01 17:38:06 CDT --- (In reply to comment #4)
That's not how QueryInterface is supposed to work... I suspect the bug is elsewhere.
According to my fprintf statements, nsscript is not NULL immediately before:
if(nsparser) nsIParser_BeginEvaluatingParserInsertedScript(nsparser);
in mutation.c, and is NULL immediately afterwards.