Following a link or simply typing in another adress (e.g. www.yahoo.com) after loading this page causes mozilla to quit ([1]+ Done ./mozilla). Build ID: 2000080308 on Red Hat Linux 6.2 with kernel 2.2.16-3, XFree86 4.0.1 with vendor-supplied NVidia drivers for RivaTNT.

Same problem here build 2000080113/Linux RH6.9.5/i586 Kernel 2.2.16

I crash win32 trunk 080308 build with these steps. Stack trace below. Over to layout. 0x00000013 nsAbsoluteContainingBlock::DestroyFrames [d:\builds\seamonkey\mozilla\layout\html\base\src\nsAbsoluteContainingBlock.cpp, line 365] nsPositionedInlineFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsInlineFrame.cpp, line 942] nsLineBox::DeleteLineList [d:\builds\seamonkey\mozilla\layout\html\base\src\nsLineBox.cpp, line 252] nsBlockFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1215] nsFrameList::DestroyFrames [d:\builds\seamonkey\mozilla\layout\base\src\nsFrameList.cpp, line 36] nsAbsoluteContainingBlock::DestroyFrames [d:\builds\seamonkey\mozilla\layout\html\base\src\nsAbsoluteContainingBlock.cpp, line 365] nsBlockFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1206] nsFrameList::DestroyFrames [d:\builds\seamonkey\mozilla\layout\base\src\nsFrameList.cpp, line 36] nsAbsoluteContainingBlock::DestroyFrames [d:\builds\seamonkey\mozilla\layout\html\base\src\nsAbsoluteContainingBlock.cpp, line 365] nsBlockFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1206] nsFrameList::DestroyFrames [d:\builds\seamonkey\mozilla\layout\base\src\nsFrameList.cpp, line 36] nsContainerFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 98] nsFrameList::DestroyFrames [d:\builds\seamonkey\mozilla\layout\base\src\nsFrameList.cpp, line 36] nsContainerFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 98] nsBoxFrame::Destroy [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 932] nsFrameList::DestroyFrames [d:\builds\seamonkey\mozilla\layout\base\src\nsFrameList.cpp, line 36] nsContainerFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 98] nsBoxFrame::Destroy [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 932] nsMenuPopupFrame::Destroy [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuPopupFrame.cpp, line 1299] nsFrameList::DestroyFrames [d:\builds\seamonkey\mozilla\layout\base\src\nsFrameList.cpp, line 36] nsContainerFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 98] ViewportFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsViewportFrame.cpp, line 144] FrameManager::~FrameManager [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 383] FrameManager::`scalar deleting destructor' FrameManager::Release [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 365] PresShell::~PresShell [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 1126] PresShell::`scalar deleting destructor' PresShell::Release [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 1044] nsCOMPtr_base::~nsCOMPtr_base [d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 50] DocumentViewerImpl::~DocumentViewerImpl [d:\builds\seamonkey\mozilla\layout\base\src\nsDocumentViewer.cpp] DocumentViewerImpl::`scalar deleting destructor' DocumentViewerImpl::Release [d:\builds\seamonkey\mozilla\layout\base\src\nsDocumentViewer.cpp, line 352] nsCOMPtr_base::assign_with_AddRef [d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 59] 0x80000000 nsWebShell::SetupNewViewer [d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 395] nsDocShell::Embed [d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 2310] nsWebShell::Embed [d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 419] nsDocShell::CreateContentViewer [d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 2479] nsDSURIContentListener::DoContent [d:\builds\seamonkey\mozilla\docshell\base\nsDSURIContentListener.cpp, line 101] nsDocumentOpenInfo::DispatchContent [d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 362] nsDocumentOpenInfo::OnStartRequest [d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 234] nsHTTPFinalListener::OnStartRequest [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp p, line 1151] InterceptStreamListener::OnStartRequest [d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCachedNetData.cpp, line 1168] nsHTTPServerListener::FinishedResponseHeaders [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp p, line 1089] nsHTTPServerListener::OnDataAvailable [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp p, line 425] nsOnDataAvailableEvent::HandleEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 406] nsStreamListenerEvent::HandlePLEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 106] PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 588] PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 547] _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 1045] KERNEL32.DLL + 0x363b (0xbff7363b) KERNEL32.DLL + 0x24407 (0xbff94407)

crash with (win98 2000080308) Probably is appropriate to add keyword crash and change os to all MOZILLA caused an invalid page fault in module <unknown> at 0000:00000013. Registers: EAX=028a62f0 CS=015f EIP=00000013 EFLGS=00010286 EBX=02d7b4a8 SS=0167 ESP=0068f588 EBP=0068f5a0 ECX=0068f59c DS=0167 ESI=028a6620 FS=4717 EDX=028a6860 ES=0167 EDI=028a68cc GS=0000 Bytes at CS:EIP: 00 54 ff 00 f0 79 ea 00 f0 21 ea 00 f0 00 00 00 Stack dump: 01443d00 028a6620 0068f59c 028a6b4c 028a6898 028a68cc 0068f5d0 013993d3 02db98e0 013854c1 028a6898 02db98e0 028a6898 013a2d57 028a6898 02db98e0

*** This bug has been marked as a duplicate of 46356 ***

Verified dupe of bug 46356, dupe of fixed bug 42372: "crash during frame destruction code while leaving page" Tested with linux 2000090908.