Bug 364900 - topcrash [@ nsXULDocument::ResumeWalk], starting with 2006122304 build

p=asqueella@gmail.com (Nickolay Ponomarev)
r+sr=bzbarsky@mit.edu (Boris Zbarsky)

content/xul/content/src/nsXULElement.cpp

@@ -2606,6 +2606,9 @@ nsXULPrototypeElement::Deserialize(nsIObjectInputStream* aStream,
                 // If we failed to deserialize, consider deleting 'script'?
                 break;
             }
+            default:
+                NS_NOTREACHED("Unexpected child type!");
+                rv = NS_ERROR_UNEXPECTED;
             }
 
             mChildren[i] = child;

content/xul/document/src/nsXULPrototypeCache.cpp

@@ -209,6 +209,8 @@ nsXULPrototypeCache::GetPrototype(nsIURI* aURI)
                     PutPrototype(protoDoc);
 
                     gFastLoadService->EndMuxedDocument(aURI);
+                } else {
+                    NS_RELEASE(protoDoc);
                 }
 
                 RemoveFromFastLoadSet(aURI);