User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4b) Gecko/20030525 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4b) Gecko/20030525 With the testcase I made directly from that URL address. It is observed that when I use the print preview, it worked perfectly. But when I use any of those features, 1) 'Close' Button, 2) Portrait/Landscape Option and 3) Scale Selection Menu Bar (Srink To Fit or any of those % in numbers). Mozilla crashed with an error with to the unreadable memory where the memory references is pointed to. Reproducible: Always Steps to Reproduce: 1. Use the testcase for top crash purpose. (Top Crash Reasons) 2. After the testcase is loaded, use the Print Preview from the 'File' menu. 3. Noticed that Print Preview can't go beyond 1 page for some reasons, neither does the printer printing. 4. When making a Mozilla crash attempt, use any of those 3 option(s). a) 'Close' Button b) Portrait/Landscape Button Box c) 'Scale' Selection Menu Bar Actual Results: Mozilla spitted out an Error Dialog Box stating that it could not read the memory located at the memory reference point. Expected Results: Memory Reference Point to the memory area should be readable at all cost. Will enclose the Talkback crash ID after filing the bug. (Need to attempt to crash Mozilla in order to get the talkback crash ID, not before completing the filing of the Mozilla bug.) Will enclose a snaphot of the 3 options in the Print Preview where everyone here can get a better idea of the instruction. Will enclose a couple of the error message regarding the memory reference pointer that aren't readable.

Decided to set OS to Windows NT because it affected both Windows 2000 and Windows XP since they both are build on top of Windows NT architecture.

The 3 Talkback crash ID are ... TB20436643Z -- Crash on 'Close' Button TB20436712H -- Crash on 'Landscape/Portrait' Button TB20436765E -- Crash on 'Scale' Selection Bar (30%,150%,Shrink To Fit, etc.)

Observed bug# 203206 and concluded that this does not apply because that bug involve the printing, not Print Preview. It doesn't hurt to test the Print Preview, so I did and found that it is a 'Work For Me' bug with Print Preview. Observed bug# 206260 and concluded that this does not apply because the Print Preview there is a 'Work For Me' bug. Did not try the Printing to the printer. This bug is now a Print Preview bug only, not Print to the printer bug because it is possible that with this testcases and this top crash bugs will enable the Mozilla devolopers to narrow down the problem and make some patches more quickly. I have no doubt that this will help most of the other bugs. I do not know why does most of the other bugs is a 'Work For Me' bug and that this bug is a top crash for me. As for the Print to the printer, it is most of the time a 'Work For Me' bug. I would recommended that this bug not be a duplicate of the other bugs because of that. Most of all, I would recommended that someone at Mozilla create a bug tracker for the 'Print Preview' and 'Print' to the printer bug.

It crashed on me too on LInux 2003052505 when I clicked the close button.

It's crashing on me as well, have tried clicking on 'close' and 'landscape' inside the print preview for your test case on 2003052808 build and 20030312 (that is 1.3) on Windows 98. Started to copy my error data, but noticed you already posted your talkback id numbers... Didn't find any directly related bugs on preliminary search...

00720061() nsContainerFrame::Destroy(nsContainerFrame * const 0x03698778, nsIPresContext * 0x0356ac50) line 140 nsBlockFrame::Destroy(nsBlockFrame * const 0x033dee58, nsIPresContext * 0x0356ac50) line 331 + 7 bytes nsLineBox::DeleteLineList(nsIPresContext * 0x0356ac50, nsLineList & {...}) line 306 + 10 bytes DestroyOverflowLines(nsIPresContext * 0x0356ac50, nsIFrame * 0x033b14b8, nsIAtom * 0x0024ef08, void * 0x033459e8) line 4548 DestroyPropertyEnumerator(PLDHashTable * 0x032b869c, PLDHashEntryHdr * 0x034111c4, unsigned int 0, void * 0x0356ac50) line 2738 + 22 bytes PL_DHashTableEnumerate(PLDHashTable * 0x00000001, int (PLDHashTable *, PLDHashEntryHdr *, unsigned int, void *)* 0x012786a4 DestroyPropertyEnumerator(PLDHashTable *, PLDHashEntryHdr *, unsigned int, void *), void * 0x0356ac50) line 594 + 15 bytes FrameManager::PropertyList::Destroy(FrameManager::PropertyList * const 0x0265e5e0, nsIPresContext * 0x0356ac50) line 2748 + 18 bytes FrameManager::DestroyPropertyList(FrameManager * const 0x0265e5e0, nsIPresContext * 0x0356ac50) line 2444 FrameManager::Destroy(FrameManager * const 0x03577e68) line 533 PresShell::Destroy(PresShell * const 0x00000000) line 1843 DocumentViewerImpl::InstallNewPresentation(DocumentViewerImpl * const 0x0265e5e0) line 3747 nsPrintEngine::FinishPrintPreview(nsPrintEngine * const 0x0265e5e0) line 4549 nsPrintEngine::PrintPreview(nsPrintEngine * const 0x0352f534, nsIPrintSettings * 0x0327d450, nsIDOMWindow * 0x032c6bcc, nsIWebProgressListener * 0x035a4864) line 1271 + 7 bytes DocumentViewerImpl::PrintPreview(DocumentViewerImpl * const 0x0371b690, nsIPrintSettings * 0x03472f28, nsIDOMWindow * 0x032c6bcc, nsIWebProgressListener * 0x035a4864) line 3138 + 18 bytes XPTC_InvokeByIndex(nsISupports * 0x0371b690, unsigned int 14, unsigned int 3, nsXPTCVariant * 0x0012efb4) line 102 XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode -1838910528) line 2017 + 22 bytes XPC_WN_CallMethod(JSContext * 0x0342dd60, JSObject * 0x026473c0, unsigned int 3, long * 0x03337764, long * 0x033376c8) line 1284 + 10 bytes js_Invoke(JSContext * 0x00000001, unsigned int 3, unsigned int 0) line 843 + 17 bytes js_Interpret(JSContext * 0x0342dd60, long * 0x0012f424) line 2854 js_Invoke(JSContext * 0x00000001, unsigned int 3, unsigned int 2) line 860 + 10 bytes nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJSClass * const 0x02371e50, nsXPCWrappedJS * 0x034bb400, unsigned short 3, const nsXPTMethodInfo * 0x02368e90, nsXPTCMiniVariant * 0x0012f5e0) line 1332 + 16 bytes nsXPCWrappedJS::CallMethod(nsXPCWrappedJS * const 0x034bb400, unsigned short 3, const nsXPTMethodInfo * 0x02368e90, nsXPTCMiniVariant * 0x0012f5e0) line 429 PrepareAndDispatch(nsXPTCStubBase * 0x00000000, unsigned int 3, unsigned int * 0x0012f698, unsigned int * 0x0012f688) line 117 + 18 bytes SharedStub() line 147 nsPrintProgress::DoneIniting(nsPrintProgress * const 0x03791c28) line 228 XPTC_InvokeByIndex(nsISupports * 0x03791c28, unsigned int 12, unsigned int 0, nsXPTCVariant * 0x0012f6d0) line 102 XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode 40138880) line 2017 + 22 bytes XPC_WN_CallMethod(JSContext * 0x0342dd60, JSObject * 0x02647880, unsigned int 0, long * 0x032fc65c, long * 0x032fc5d8) line 1284 + 10 bytes js_Invoke(JSContext * 0x00000001, unsigned int 0, unsigned int 0) line 843 + 17 bytes js_Interpret(JSContext * 0x0342dd60, long * 0x0012fb40) line 2854 js_Invoke(JSContext * 0x00000001, unsigned int 1, unsigned int 2) line 860 + 10 bytes js_InternalInvoke(JSContext * 0x0342dd88, JSObject * 0x02647ea8, long 40851784, unsigned int 0, unsigned int 1, long * 0x032b3ca8, long * 0x0012fc5c) line 935 + 13 bytes JS_CallFunctionValue(JSContext * 0x0342dd60, JSObject * 0x02647ea8, long 40851784, unsigned int 1, long * 0x032b3ca8, long * 0x0012fc5c) line 3527 + 26 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x00e0b258, void * 0x02647ea8, void * 0x026f5948, unsigned int 1, void * 0x032b3ca8, int * 0x0012fd7c, int 0) line 1111 + 25 bytes GlobalWindowImpl::RunTimeout(GlobalWindowImpl * const 0x0265e5e0, nsTimeoutImpl * 0x00000000) line 4949 GlobalWindowImpl::TimerCallback(nsITimer * 0x031c8ed0, void * 0x03476c08) line 5305 nsTimerImpl::Fire(nsTimerImpl * const 0x0265e5e0) line 382 + 7 bytes nsAppShell::Run(nsAppShell * const 0x00def9a0) line 143 nsAppShellService::Run(nsAppShellService * const 0x00deb058) line 479 main1(int 0, char * * 0x00243de8, nsISupports * 0x00000000) line 1268 + 9 bytes main(int 3, char * * 0x00243de8) line 1647 + 22 bytes WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00400000, char * 0x001334ee, HINSTANCE__ * 0x00400000) line 1671 + 23 bytes MOZILLA! WinMainCRTStartup + 308 bytes KERNEL32! 77e9847c()

*** This bug has been marked as a duplicate of 156982 ***

verified.