Another day, another bugfix in the dev version. This one manifests when it encounters bogus markup but makes no attempt to fix it (i.e. ProxyHTMLDoctype is not set, or is set using the alternative syntax). It looks up the definition of the element in libxml2, but gets a null pointer. I … erm … had thought it dealt with that case, but missed a vital use case.
Fixed in svn r90.