I accidentally discovered a way to reliably crash Mozilla with bogus HTTP headers. At this point I'm just kinda annoyed because I know I have to report it some correct way, going through proper security channels (because it's likely exploitable, watching it with strace), but it'd be so much easier just to post details here in my LJ..... *sigh*