[Bug 9291] New: iexplore http://pack.google.com crashes

http://bugs.winehq.org/show_bug.cgi?id=9291

Summary: iexplore http://pack.google.com crashes
           Product: Wine
           Version: CVS
          Platform: Other
        OS/Version: other
            Status: NEW
          Keywords: download
          Severity: enhancement
          Priority: P2
         Component: wine-shdocvw
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Wine's built-in iexplore crashes on http://pack.google.com.

Unhandled exception: page fault on read access to 0x0000005c in 32-bit code
(0x7c7bd7a8).
Backtrace:
=>1 0x7c7bd7a8 nsChannel_AsyncOpen+0x4e8(iface=0x1063958, aListener=0x1063998,
aContext=0x0) [/home/dank/wine-git/dlls/mshtml/nsio.c:107] in mshtml 
0x7c7bd7a8 nsChannel_AsyncOpen+0x4e8
[/home/dank/wine-git/dlls/mshtml/nsio.c:107] in mshtml: movl      
0x5c(%esi),%edi
107             while(!container_iter->doc)

I peeked at nsio.c, and it does look vulnerable to container_iter going 
unexpectedly null during that loop, but a real fix wasn't immediately obvious.