Happens with Thunderbird 1.5 beta1 and 20050910 builds. Steps to reproduce: 1. Reply to a message with several lines of text (using plain text msg composition, I didn't try with HTML messages) 2. Move the cursor inside the quoted message using the cursor keys 3. If Thunderbird didn't crash already, hit the return key to insert a new line 4. Thunderbird crashes

hmmm I wasn't able to reproduce this using 1.5 beta 1 on Windows. Mike, can you reproduce this?

(In reply to comment #1) > Mike, can you reproduce this? Not with 1.5b1-0904; I don't have a later build. Patrick, what was the last build you used that didn't exhibit the problem? How easy is it to reproduce? Do you have talkback enabled? If so, did the crash open talkback? What's the incident ID? Do you get the same results if you run TB in Safe Mode?

I can reproduce it with almost every message. I don't know when it last didn't appear since I directly switched from 1.0.6 to 1.5b1. I have already submitted a talkback report; I'll try to create some more.

Interesting enough, currently I can only reproduce it for "Edit as new" and "Forward as inline". Talkback IDs: TB9299945X (edit as new, change message body of exisiting message) TB9300009Z (forward as inline, change message body of forwarded message)

Incident ID: 9299945 Stack Signature nsFontMetricsWin::ResolveForwards feb816c7 Product ID Thunderbird15 Build ID 2005090910 Trigger Time 2005-09-13 00:28:19.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module THUNDE~1.EXE + (000d1668) URL visited User Comments Edit message as new, then moved with the cursor keys around the text, inserted some new line Since Last Crash 314 sec Total Uptime 314 sec Trigger Reason Access violation Source File, Line No. e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 4008 Stack Trace nsFontMetricsWin::ResolveForwards [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 4008] nsRenderingContextWin::GetWidth [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/gfx/src/windows/nsRenderingContextWin.cpp, line 1514] nsTextFrame::GetPointFromOffset [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsTextFrame.cpp, line 4214] nsTypedSelection::GetPointFromOffset [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 6747] nsTypedSelection::GetCachedFrameOffset [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 5090] nsCaret::GetCaretRectAndInvert [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 988] nsCaret::DrawAtPositionWithHint [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 704] nsCaret::DrawCaret [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 908] nsCaret::StartBlinking [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 481] nsTypedSelection::NotifySelectionListeners [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 7295] nsSelection::NotifySelectionListeners [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 3007] nsSelection::MoveCaret [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 1445] nsSelection::LineMove [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 2944] PresShell::LineMove [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp, line 3231] nsSelectionMoveCommands::DoCommand [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/editor/libeditor/base/nsEditorCommands.cpp, line 655] nsControllerCommandTable::DoCommand [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/embedding/components/commandhandler/src/nsCo ntrollerCommandTable.cpp, line 191] nsBaseCommandController::DoCommand [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/embedding/components/commandhandler/src/nsBa seCommandController.cpp, line 132] nsXBLWindowHandler::WalkHandlersInternal [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xbl/src/nsXBLWindowHandler.cpp, line 306] nsXBLWindowKeyHandler::WalkHandlers [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xbl/src/nsXBLWindowKeyHandler.cpp, line 196] nsXBLWindowKeyHandler::KeyPress [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xbl/src/nsXBLWindowKeyHandler.cpp, line 249] nsEventListenerManager::HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/events/src/nsEventListenerManager.cp p, line 1779] nsWindowRoot::HandleChromeEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsWindowRoot.cpp, line 255] nsGlobalWindow::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 1553] nsXULDocument::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp, line 1252] nsXULElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2226] nsXULElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2222] nsXULElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2222] nsXULElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2222] nsXULElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2222] nsXULElement::HandleChromeEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2881] nsGlobalWindow::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 1553] nsDocument::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/base/src/nsDocument.cpp, line 4160] nsGenericElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 2166] PresShell::HandleEventInternal [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp, line 6432] PresShell::HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp, line 6215] nsViewManager::HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsViewManager.cpp, line 2514] nsViewManager::DispatchEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsViewManager.cpp, line 2246] HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsView.cpp, line 174] nsWindow::DispatchEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1252] nsWindow::DispatchKeyEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3448] nsWindow::OnKeyDown [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3586] nsWindow::ProcessMessage [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 4492] nsWindow::WindowProc [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1434] USER32.dll + 0x8734 (0x77d48734) USER32.dll + 0x8816 (0x77d48816) USER32.dll + 0x89cd (0x77d489cd) USER32.dll + 0x8a10 (0x77d48a10) nsAppShell::Run [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsAppShell.cpp, line 159] nsAppStartup::Run [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/toolkit/components/startup/src/nsAppStartup. cpp, line 146] main [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/mail/app/nsMailApp.cpp, line 62] kernel32.dll + 0x16d4f (0x7c816d4f) Incident ID: 9300009 Stack Signature nsFontMetricsWin::ResolveForwards 6d89bf1f Product ID Thunderbird15 Build ID 2005090910 Trigger Time 2005-09-13 00:33:18.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module THUNDE~1.EXE + (000d1668) URL visited User Comments Since Last Crash 32 sec Total Uptime 346 sec Trigger Reason Access violation Source File, Line No. e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 4008 Stack Trace nsFontMetricsWin::ResolveForwards [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 4008] nsRenderingContextWin::GetWidth [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/gfx/src/windows/nsRenderingContextWin.cpp, line 1514] nsTextFrame::GetPointFromOffset [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsTextFrame.cpp, line 4214] nsTypedSelection::GetPointFromOffset [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 6747] nsTypedSelection::GetCachedFrameOffset [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/generic/nsSelection.cpp, line 5090] nsCaret::GetCaretRectAndInvert [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 988] nsCaret::DrawAtPositionWithHint [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 704] nsCaret::DrawCaret [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 908] nsCaret::StartBlinking [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsCaret.cpp, line 481] PresShellViewEventListener::DidRefreshRect [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp, line 7895] nsViewManager::DispatchEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsViewManager.cpp, line 2047] HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsView.cpp, line 174] nsWindow::DispatchEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1252] nsWindow::ProcessMessage [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 4362] nsWindow::WindowProc [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1434] USER32.dll + 0x8734 (0x77d48734) USER32.dll + 0x8816 (0x77d48816) USER32.dll + 0xb4c0 (0x77d4b4c0) USER32.dll + 0xb50c (0x77d4b50c) ntdll.dll + 0xeae3 (0x7c90eae3) nsWindow::Update [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3142] nsHTMLEditor::EndUpdateViewBatch [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/editor/libeditor/html/nsHTMLEditor.cpp, line 5867] nsEditor::EndPlaceHolderTransaction [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/editor/libeditor/base/nsEditor.cpp, line 937] nsAutoPlaceHolderBatch::~nsAutoPlaceHolderBatch [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/editor/libeditor/base\nsEditorUtils.h, line 66] nsHTMLEditor::HandleKeyPress [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/editor/libeditor/html/nsHTMLEditor.cpp, line 1317] nsTextEditorKeyListener::KeyPress [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/editor/libeditor/text/nsEditorEventListeners .cpp, line 243] DispatchToInterface [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/events/src/nsEventListenerManager.cp p, line 141] nsEventListenerManager::HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/events/src/nsEventListenerManager.cp p, line 1779] nsDocument::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/base/src/nsDocument.cpp, line 4150] nsGenericElement::HandleDOMEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 2166] PresShell::HandleEventInternal [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp, line 6432] PresShell::HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp, line 6215] nsViewManager::HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsViewManager.cpp, line 2514] nsViewManager::DispatchEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsViewManager.cpp, line 2246] HandleEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/view/src/nsView.cpp, line 174] nsWindow::DispatchEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1252] nsWindow::DispatchKeyEvent [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3448] nsWindow::OnKeyDown [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3586] nsWindow::ProcessMessage [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 4492] nsWindow::WindowProc [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1434] USER32.dll + 0x8734 (0x77d48734) USER32.dll + 0x8816 (0x77d48816) USER32.dll + 0x89cd (0x77d489cd) USER32.dll + 0x8a10 (0x77d48a10) nsAppShell::Run [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/widget/src/windows/nsAppShell.cpp, line 159] nsAppStartup::Run [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/toolkit/components/startup/src/nsAppStartup. cpp, line 146] main [e:/builds/tinderbox/Tb- Mozilla1.8/WINNT_5.0_Depend/mozilla/mail/app/nsMailApp.cpp, line 62] kernel32.dll + 0x16d4f (0x7c816d4f)

*** This bug has been marked as a duplicate of 307875 ***