Created by Paul De Bra (debra@win.tue.nl) on Thursday, April 9, 1998 5:41:11 AM PDT Additional Details : Load the mentioned page. It shows two frames. The left frame shows some kind of index. Click on one of the words in the index. Navigator crashes. This bug was already present in Navigator 4.04 and 4.05 and occurs on all unix versions but not on Windows''95. (The bug never showed up in the list of known issues.)

Adding url.

I can reproduce this bug, I get the following stack trace: #0 0x40609d5b in CL_GetLayerCompositor (layer=0x6575742e) at cl_layer.c:842 #1 0x403f753d in lo_RefreshElement (element=0x85fb6c0, layer=0x6575742e, update_now=1 '\001') at layutil.c:139 #2 0x403c88d4 in LO_HighlightAnchor (context=0x8428200, element=0x85fb6c0, on=0 '\000') at layout.c:6684 #3 0x80baffd in fe_disarm_link_action_by_context (context=0x8428200, event=0x825b7c0, av=0x0, ac=0x0) at lay.c:3589 #4 0x80bb5ae in fe_disarm_last_xref () at lay.c:3802 #5 0x80bb5f9 in fe_mocha_handle_click (context=0x8428200, element=0x85fb6c0, event=64, closure=0x8573580, status=EVENT_CANCEL) at lay.c:3821 #6 0x406bd2e6 in et_HandleEvent_JsEventAck (e=0x85ad600) at et_moz.c:1299 #7 0x407ce12f in PL_HandleEvent (self=0x85ad600) at plevent.c:395 #8 0x407ce049 in PL_ProcessPendingEvents (self=0x8272280) at plevent.c:357 #9 0x80bfa70 in fe_event_processor_callback (closure=0x0, fd=0x841c7f4, id=0xbfffd6e4) at mozilla.c:1826 #10 0x4085693d in XtAppProcessEvent () #11 0x80bec86 in fe_EventLoop () at mozilla.c:1155 #12 0x80c1ead in main (argc=1, argv=0xbfffef64) at mozilla.c:3464 adding toshok@netscape.com to cc.

Marking p1. Reassign to nisheeth@netscape.com

Adding toshok to the cc list. Accepting bug.

I crashed on NT also with the following call stack once I clicked on any link in the left frame after the image in the right frame had finished loading. CCing mlm. Mike, any ideas? JS_GetPrivate(JSContext * 0x00acb680, JSObject * 0xdddddddd) line 1040 + 3 bytes lm_InputEvent(MWContext_ * 0x00aabc30, LO_Element_struct * 0x01c7b004, JSEvent * 0x00b5f630, long * 0x01edff1c) line 2548 + 14 bytes et_event_handler(JSEvent * 0x00b5f630) line 302 + 24 bytes PL_HandleEvent(PLEvent * 0x00b5f630) line 395 + 10 bytes et_SubEventLoopGroup(WindowGroup * 0x00a81360) line 2574 + 9 bytes lm_wait_for_events(void * 0x00a81360) line 2624 + 9 bytes _PR_NativeRunThread(void * 0x00a81780) line 381 + 13 bytes _threadstartex(void * 0x00a81940) line 212 + 13 bytes KERNEL32! 77f04f2c()

Putting on ss: radar.

This doesn't crash anymore so not a stop ship. Removing the ss:

This bug does not exist in the NGLayout based browser. So, marking it WONTFIX.

Marking Verified/Won't Fix