nsRangeList::TakeFocus(), line 819 of nsRangeList.cpp: if (beginoffset <= aOffset) yields an unitialized memory error for 'beginoffset'. In this instance, this was gotten by clicking on the 'Homer' button in apprunner, which (because of the bug in clicking on Linux), eventually yielded a call to nsFrame::HandleDrag() which called nsRangeList::TakeFocus().

fixed

Changing a few bugs at once...This is a bug that I have determined I am unable to properly verify. More than likely this would be because it is outside my expertise or experience, or i don't have the necessary tools. I am now ASKING PLEASE, please could the bug owner or reporter take it upon themselves to verify the fix for this bug and mark it VERIFIED? Don't be shy, step right up. Thank you.

hey mike, I wasn't able to reproduce this bug in an old build (circa March13) and therefore can't truly verify the fix in a new build. Probably cuz I don't fully understand the behavior (or lack thereof), could you mark it verified for me? That way we can finally get it off of the M3 radar.

I've not seen this since the fix. Thanks all.

Per a request from Selection and Search component eng (mjudge) and qa (elig), moving all "Selection and Search" bugs to new "Selection" component. Original "Selection and Search" component will be retired.