https://bugs.winehq.org/show_bug.cgi?id=34982
--- Comment #10 from Indrek efbiaiinzinz@hotmail.com --- Bit more digging in the logfile revealed the culprit line in jquery that causes misbehaviour.
bx = function (a, b) { var c, d = a.currentStyle && a.currentStyle[b].. The first invocation of a.currentStyle before the && sign creates instance of HTMLCurrentStyle and then releases it (I guess since it is not stored into any variable), but for some reason, the second part of && ends up using the same reference to the now-released HTMLCurrentStyle which ends up as segfault, because nsstyle has been released already.
Either the jscript releases the currentStyle too early or the mshtml incorrectly reuses the released currentStyle instance, will have to dig a bit more.