When trying to download a file this morning on winnt (full clobber pull build). I crash. here's a stack. nsFieldSetFrame.cpp nsFieldSetFrame::Reflow() if (reflowLegend) { nsFrameState state; mLegendFrame->GetFrameState(&state); reflowLegend = (state & NS_FRAME_IS_DIRTY) || (state & NS_FRAME_HAS_DIRTY_CHILDREN); } } mLegentFrame is null. nsFieldSetFrame::Reflow(nsFieldSetFrame * const 0x02e2ff24, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 312 + 19 bytes nsBoxFrameInner::FlowChildAt(nsIFrame * 0x02e2ff24, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0, nsCalculatedBoxInfo & {...}, int 0, int 0, int 1, nsIFrame * & 0x00000000, int & 0, const nsString & {...}) line 1767 nsBoxFrameInner::FlowChildren(nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0, nsIFrame * & 0x00000000, nsRect & {...}) line 1138 nsBoxFrame::Reflow(nsBoxFrame * const 0x02e2fe70, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 906 nsBoxFrame::Reflow(nsBoxFrame * const 0x02e2fe70, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 812 + 34 bytes nsContainerFrame::ReflowChild(nsIFrame * 0x02e2fe70, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, int 0, unsigned int 0, unsigned int & 0) line 638 + 31 bytes RootFrame::Reflow(RootFrame * const 0x02e2fe34, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 331 nsContainerFrame::ReflowChild(nsIFrame * 0x02e2fe34, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, int 0, unsigned int 0, unsigned int & 0) line 638 + 31 bytes ViewportFrame::Reflow(ViewportFrame * const 0x02e2fdf8, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 531 nsHTMLReflowCommand::Dispatch(nsHTMLReflowCommand * const 0x0385da90, nsIPresContext * 0x03696110, nsHTMLReflowMetrics & {...}, const nsSize & {...}, nsIRenderingContext & {...}) line 145 PresShell::ProcessReflowCommands(PresShell * const 0x0367e3f0, int 1) line 1958 ReflowEvent::HandleEvent() line 1858 HandlePLEvent(ReflowEvent * 0x03851b00) line 1870 PL_HandleEvent(PLEvent * 0x03851b00) line 526 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x0244ddf0) line 487 + 9 bytes _md_EventReceiverProc(HWND__ * 0x009d04ae, unsigned int 49475, unsigned int 0, long 38067696) line 975 + 9 bytes USER32! 77e71820()

spam: added self to cc list, as this affects my realm. :-)

*** Bug 27225 has been marked as a duplicate of this bug. ***

fixed.

I'm still seeing this on the latest win32 verification build. ftp://sweetlou, right click on a file, save as, crash.

This is fixed. However it crashes somewhere else later in ftp. So another bug has been opened.

Fixed in the Feb 18th build.