according to esther, suresh and nbaca, its happening on all platforms. here's the linux stack trace: #0 0x40f44983 in nsGenericElement::Release (this=0x8c87140) at nsGenericElement.cpp:1207 #1 0x40412ff0 in nsJSUtils::nsGenericResolve (aContext=0x8b20090, aObj=0x86275a0, aId=136212364) at nsJSUtils.cpp:532 #2 0x40424339 in ResolveElement (cx=0x8b20090, obj=0x86275a0, id=136212364) at nsJSElement.cpp:166 #3 0x4009ae7c in _js_LookupProperty (cx=0x8b20090, obj=0x86275a0, id=136285488, objp=0xbfffe044, propp=0xbfffe040, file=0x400ccd40 "jsobj.c", line=1669) at jsobj.c:1507 #4 0x4009b9a4 in js_GetProperty (cx=0x8b20090, obj=0x86275a0, id=136285488, vp=0xbfffe8e0) at jsobj.c:1669 #5 0x4008b5ca in js_Interpret (cx=0x8b20090, result=0xbfffe9b4) at jsinterp.c:2184 #6 0x4007e7ed in js_Invoke (cx=0x8b20090, argc=1, flags=2) at jsinterp.c:670 #7 0x4007eb08 in js_InternalCall (cx=0x8b20090, obj=0x8b3bcb8, fval=145996992, argc=1, argv=0xbfffeb58, rval=0xbfffeb5c) at jsinterp.c:747 #8 0x40056a09 in JS_CallFunctionValue (cx=0x8b20090, obj=0x8b3bcb8, fval=145996992, argc=1, argv=0xbfffeb58, rval=0xbfffeb5c) at jsapi.c:2662 #9 0x4042f749 in nsJSEventListener::HandleEvent (this=0x8ba3730, aEvent=0x8e078b8) at nsJSEventListener.cpp:110 #10 0x40d3eba0 in nsEventListenerManager::HandleEvent (this=0x8ba17f8, aPresContext=@0x8ab7430, aEvent=0xbffff04c, aDOMEvent=0xbfffefe4, aFlags=2, aEventStatus=@0xbffff350) at nsEventListenerManager.cpp:621 #11 0x408cd964 in RDFElementImpl::HandleDOMEvent (this=0x8ba1150, aPresContext=@0x8ab7430, aEvent=0xbffff04c, aDOMEvent=0xbfffefe4, aFlags=2, aEventStatus=@0xbffff350) at nsRDFElement.cpp:2858 #12 0x408cd9b0 in RDFElementImpl::HandleDOMEvent (this=0x8bd9fe8, aPresContext=@0x8ab7430, aEvent=0xbffff04c, aDOMEvent=0xbfffefe4, aFlags=2, aEventStatus=@0xbffff350) at nsRDFElement.cpp:2866 #13 0x408cd9b0 in RDFElementImpl::HandleDOMEvent (this=0x8c84ea0, aPresContext=@0x8ab7430, aEvent=0xbffff04c, aDOMEvent=0xbfffefe4, aFlags=2, aEventStatus=@0xbffff350) at nsRDFElement.cpp:2866 #14 0x40f43766 in nsGenericElement::HandleDOMEvent (this=0x8c87140, aPresContext=@0x8ab7430, aEvent=0xbffff04c, aDOMEvent=0xbfffefe4, aFlags=1, aEventStatus=@0xbffff350) at nsGenericElement.cpp:789 #15 0x40f17624 in AnonymousElement::HandleDOMEvent (this=0x8c87128, aPresContext=@0x8ab7430, aEvent=0xbffff04c, aDOMEvent=0x0, aFlags=1, aEventStatus=@0xbffff350) at nsScrollbarFrame.cpp:129 #16 0x40d42749 in nsEventStateManager::CheckForAndDispatchClick (this=0x8bd5ce0, aPresContext=@0x8ab7430, aEvent=0xbffff410, aStatus=@0xbffff350) at nsEventStateManager.cpp:864 #17 0x40d41655 in nsEventStateManager::PostHandleEvent (this=0x8bd5ce0, aPresContext=@0x8ab7430, aEvent=0xbffff410, aTargetFrame=0x8c88c40, aStatus=@0xbffff350, aView=0x8b4e860) at nsEventStateManager.cpp:393 #18 0x40d83a9e in PresShell::HandleEvent (this=0x8b4a688, aView=0x8b4e860, aEvent=0xbffff410, aEventStatus=@0xbffff350) at nsPresShell.cpp:2005 #19 0x41cbdbb3 in ?? () from /builds/seth/seamonkey/mozilla/dist/bin/libraptorview.so #20 0x41cc6f23 in ?? () from /builds/seth/seamonkey/mozilla/dist/bin/libraptorview.so #21 0x41cbbcd4 in ?? () from /builds/seth/seamonkey/mozilla/dist/bin/libraptorview.so #22 0x40552980 in nsWidget::DispatchEvent (this=0x8b4a260, aEvent=0xbffff410, aStatus=@0xbffff3cc) at nsWidget.cpp:1120 #23 0x4055271c in nsWidget::DispatchWindowEvent (this=0x8b4a260, event=0xbffff410) at nsWidget.cpp:1036 #24 0x40552a40 in nsWidget::DispatchMouseEvent (this=0x8b4a260, aEvent=@0xbffff410) at nsWidget.cpp:1147 #25 0x4055393b in nsWidget::OnButtonReleaseSignal (this=0x8b4a260, aGdkButtonEvent=0x8b7be00) at nsWidget.cpp:1751 #26 0x405544c6 in nsWidget::ButtonReleaseSignal (aWidget=0x8b4a440, aGdkButtonEvent=0x8b7be00, aData=0x8b4a260) at nsWidget.cpp:2182 #27 0x406de79d in gtk_marshal_BOOL__POINTER () #28 0x406a6037 in gtk_handlers_run () #29 0x406a552f in gtk_signal_real_emit () #30 0x406a3800 in gtk_signal_emit () #31 0x406d65b8 in gtk_widget_event () #32 0x4067b1a2 in gtk_propagate_event () #33 0x4067a4da in gtk_main_do_event () #34 0x4071dab2 in ?? () from /usr/lib/libgdk-1.2.so.0 #35 0x4074a2c6 in ?? () from /usr/lib/libglib-1.2.so.0 #36 0x4074a801 in ?? () from /usr/lib/libglib-1.2.so.0 #37 0x4074a979 in ?? () from /usr/lib/libglib-1.2.so.0 #38 0x40679f3a in gtk_main () #39 0x4053dd99 in nsAppShell::Run (this=0x808e808) at nsAppShell.cpp:379 #40 0x403a9661 in ?? () from /builds/seth/seamonkey/mozilla/dist/bin/libnsappshell.so #41 0x804b138 in main1 (argc=2, argv=0xbffffab4) at nsAppRunner.cpp:836 #42 0x804b245 in main (argc=2, argv=0xbffffab4) at nsAppRunner.cpp:859 #43 0x4027ecb3 in ?? () from /lib/libc.so.6

adding waterson...he may know of a duplicate.

setting p1 for m11

*** Bug 13486 has been marked as a duplicate of this bug. ***

Is this the same as http://bugzilla.mozilla.org/show_bug.cgi?id=12645?

(target milestone is M11 or M12 - add to mail beta tracking bug)

My hands have deteriorated to the point where I can no longer type. I need help. If you think you can fix this bug on your own, please take it away from me. If you'd like to volunteer to be my hands for a specific bug, then I'll be happy to come up to your cube and sit with you and fix the bug (assuming you have the patience for that).

I will look into this one. I will probably be by for some pointers.

*** Bug 13945 has been marked as a duplicate of this bug. ***

Used 10-13-09-M11 commercial buid/ WinNT platform /IMAP account: I still got crash if I want to scroll up to Inbox after expand folders. I don't know whether this bug is the same as bug #16105 or not? But, this time...I got Dr. Watson for WinNT: ......mozilla.exe, Exception:access violation (0xc0000005), Address:0x00000065. Maybe more similar to bug#13945.

I may have figured out what's going on here: if you are holding down the mouse button as the scrollbar goes up, and all of a sudden the scrollbar realizes it doesn't need to be there, it goes away, but he table frame is still holding onto it.

*** Bug 15474 has been marked as a duplicate of this bug. ***

go look at that bug for more stacktraces

We shouldn't hold M11 for this, but I'm going to keep this M11 for a day or so and try to focus on it.

You can also duplicate this in the AIM component (which is Dogfood and a PDT+ bug). See: http://scopus/bugsplat/show_bug.cgi?id=365255

Putting on PDT+ radar.

This should be fixed with my latest tree checkin.

This is still not fixed in the AIM case, but the stack trace is different so I'll file a separate bug.

Ninoschka, can you verify this? Thanks!

Build 19991809M12: Win32/NT4, Linux/Redhat 6.0, Mac 8.5.1 Verified Fixed. Thank you!

Crash again by using today's Linux 12-01-08-M12 build, reopen this bug!! Will try Windows and Mac later..

Karen, let's file a new bug for this. Do you have specific case? Do you have a talkback report?

I already logged another bug, it's bug#20510