* TITLE/SUMMARY Following link while text is selected crashes Apprunner * STEPS TO REPRODUCE 0) Launch Apprunner 1) Go to www.netscape.com 2) Do a drag select from the "Search the web with" text label to the bottom-right hand corner of the window. (On my screen size, that's the 3rd ABCNews item.) 3) With that text selected, click on the "Yellow Pages" link. * RESULT - What happened Browser window's content region goes white. App crashes. - What was expected Yellow Pages link to be followed. Note that while the above steps will reproducibly trigger this crash, the summary of this bug report is deceptively simple. Can't reproduce on other pages (only tried Yahoo due to easy reproducibility and questionable usefulness of bug). mjudge thinks it's related to the currently semi-broken selection code, which allows multiple simultaneous text selections (flows?) on this page, and which will be rewritten in about a week. * REGRESSION - Occurs On Mac OS Apprunner (4.20.99 AM optimized build) Win32 Apprunner (4.20.99 AM optimized build [NT 4, Service Pack 3]) Linux Apprunner (4.20.99 AM optimized build) - Couldn't Reproduce On Communicator 4.5 RTM * CONFIGURATIONS TESTED - [Mac] Power Mac 8500/120 (233 Mhz 604e), 64 MB RAM (VM on; 1 MB of VM used), 1024x768 (Thousands of Colors), Mac OS 8.5.1 - [Win32] Vectra VL (233 Mhz P2), 96 MB RAM, 800x600 (True Color), NT 4.0 SP3. - [Linux] Vectra VL (266 Mhz P2), 96 MB RAM. * STACK CRAWL

Run. Crash. Crawl. PowerPC unmapped memory exception at 0B5F50F4 Calling chain using A6/R1 links Back chain ISA Caller 00000000 PPC 0B9A5968 03ADF500 PPC 0B9A4278 main+009FC 03ADF270 PPC 0B763760 nsAppShellService::Run()+00018 03ADF230 PPC 0B2DD33C nsAppShell::Run()+00038 03ADF1B0 PPC 0B2DDD44 nsMacMessagePump::DoMessagePump()+0003C 03ADF160 PPC 0B2DDFAC nsMacMessagePump::DispatchEvent(int, EventRecord*)+ 00144 03ADF110 PPC 0B912B08 Repeater::DoRepeaters(const EventRecord&)+00030 03ADF0D0 PPC 0B90AED0 TimerPeriodical::RepeatAction(const EventRecord&)+ 00048 03ADF080 PPC 0B90AA2C TimerImpl::Fire()+00024 03ADF040 PPC 0B8831F0 nsNetlibService::NetPollSocketsCallback(nsITimer*, void*)+0001C 03ADF000 PPC 0B85FC38 NET_PollSockets+000A4 03ADEFB0 PPC 0B85B4F4 NET_ProcessNet+003C4 03ADEC20 PPC 0B87B1B4 net_ProcessHTTP+00250 03ADE7B0 PPC 0B850C30 net_MemCacheComplete+000D0 03ADE770 PPC 0B8868A4 stub_complete(_NET_StreamClass*)+0008C 03ADE6D0 PPC 0B25DF1C nsDocumentBindInfo::OnStopBinding(nsIURL*, unsigned int, const u nsigned short*)+00044 03ADE670 PPC 0B899FE8 nsUnicharStreamLoader::OnStopBinding(nsIURL*, unsigned int, cons t unsigned short*)+0001C 03ADE630 PPC 0B3DBA54 nsDoneLoadingScript(nsIUnicharStreamLoader*, nsString&, void*, u nsigned int)+00048 03ADE5E0 PPC 0B3DB6B4 HTMLContentSink::ResumeParsing()+00024 03ADE5A0 PPC 0B3161B4 nsParser::EnableParser(int)+00064 03ADE540 PPC 0B316D48 nsParser::ResumeParse(nsIDTD*)+00104 03ADE4F0 PPC 0B316058 nsParser::DidBuildModel(unsigned int)+0004C 03ADE4B0 PPC 0B305050 CNavDTD::DidBuildModel(unsigned int, int, nsIParser* , nsIContent Sink*)+00068 03ADE460 PPC 0B309A20 CNavDTD::CloseContainersTo(int, nsHTMLTag, int)+ 000AC 03ADE2F0 PPC 0B309870 CNavDTD::CloseContainer(const nsIParserNode&, nsHTMLTag, int)+00 108 03ADE290 PPC 0B308FEC CNavDTD::CloseBody(const nsIParserNode&)+00028 03ADE240 PPC 0B3D87DC HTMLContentSink::CloseBody(const nsIParserNode&)+ 0005C 03ADE1F0 PPC 0B3DEB38 nsHTMLDocument::ContentAppended(nsIContent*, int)+ 000D8 03ADE190 PPC 0B3ADCCC nsDocument::ContentAppended(nsIContent*, int)+0004C 03ADE130 PPC 0B3BE808 PresShell::ContentAppended(nsIDocument*, nsIContent* , int)+00060 03ADE0E0 PPC 0B3BB610 PresShell::ExitReflowLock()+0002C 03ADE0A0 PPC 0B3BD114 PresShell::ProcessReflowCommands()+000D4 03ADE020 PPC 0B4364BC nsHTMLReflowCommand::Dispatch(nsIPresContext&, nsHTMLReflowMetri cs&, const nsSize&, nsIRenderingContext&)+000B8 03ADDF20 PPC 0B5D0C8C ViewportFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, con st nsHTMLReflowState&, unsigned int&)+00278 03ADDDB0 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03ADDD50 PPC 0B4377F0 nsScrollFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, con st nsHTMLReflowState&, unsigned int&)+0052C 03ADDA30 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03ADD9D0 PPC 0B444518 RootFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, const n sHTMLReflowState&, unsigned int&)+00228 03ADD820 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03ADD7C0 PPC 0B5B8E50 nsAreaFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+000C8 03ADD740 PPC 0B54EBB4 nsBlockFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, cons t nsHTMLReflowState&, unsigned int&)+001F4 03ADCB80 PPC 0B54F8C4 nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&)+ 00064 03ADCB00 PPC 0B54FCFC nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineBox*, int*)+ 000A0 03ADCAB0 PPC 0B550B88 nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&, nsLineBox*, int*)+0015C 03ADC920 PPC 0B5AD2E4 nsBlockReflowContext::ReflowBlock(nsIFrame*, const nsRect&, int, int, int, nsMargin&, unsigned int&)+00268 03ADC800 PPC 0B54EBB4 nsBlockFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, cons t nsHTMLReflowState&, unsigned int&)+001F4 03ADBC40 PPC 0B54F8C4 nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&)+ 00064 03ADBBC0 PPC 0B54FCFC nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineBox*, int*)+ 000A0 03ADBB70 PPC 0B550B88 nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&, nsLineBox*, int*)+0015C 03ADB9E0 PPC 0B5AD2E4 nsBlockReflowContext::ReflowBlock(nsIFrame*, const nsRect&, int, int, int, nsMargin&, unsigned int&)+00268 03ADB8C0 PPC 0B54EBB4 nsBlockFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, cons t nsHTMLReflowState&, unsigned int&)+001F4 03ADAD00 PPC 0B54F8C4 nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&)+ 00064 03ADAC80 PPC 0B54FCFC nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineBox*, int*)+ 000A0 03ADAC30 PPC 0B550B88 nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&, nsLineBox*, int*)+0015C 03ADAAA0 PPC 0B5AD2E4 nsBlockReflowContext::ReflowBlock(nsIFrame*, const nsRect&, int, int, int, nsMargin&, unsigned int&)+00268 03ADA980 PPC 0B42D3C0 nsTableOuterFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00278 03ADA5D0 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03ADA570 PPC 0B4249E4 nsTableFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, cons t nsHTMLReflowState&, unsigned int&)+001A4 03ADA460 PPC 0B424EF0 nsTableFrame::ResizeReflowPass1(nsIPresContext&, nsHTMLReflowMet rics&, const nsHTMLReflowState&, unsigned int&, nsTableRowGroupFrame*, nsReflowReason, int)+0 0178 03ADA1A0 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03ADA140 PPC 0B432F30 nsTableRowGroupFrame::Reflow(nsIPresContext&, nsHTMLReflowMetric s&, const nsHTMLReflowState&, unsigned int&)+00170 03ADA050 PPC 0B431C4C nsTableRowGroupFrame::ReflowMappedChildren(nsIPresContext&, nsHT MLReflowMetrics&, RowGroupReflowState&, unsigned int&, nsTableRowFrame*, nsReflowReason, int) +00140 03AD9ED0 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03AD9E70 PPC 0B4308B8 nsTableRowFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, c onst nsHTMLReflowState&, unsigned int&)+000FC 03AD9D20 PPC 0B42F4C4 nsTableRowFrame::InitialReflow(nsIPresContext&, nsHTMLReflowMetr ics&, RowReflowState&, unsigned int&, nsTableCellFrame*, int)+0021C 03AD9AA0 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03AD9A40 PPC 0B41BAAC nsTableCellFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+0032C 03AD9820 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03AD97C0 PPC 0B5B8E50 nsAreaFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+000C8 03AD9740 PPC 0B54EBB4 nsBlockFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, cons t nsHTMLReflowState&, unsigned int&)+001F4 03AD8B80 PPC 0B54F8C4 nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&)+ 00064 03AD8B00 PPC 0B54FD18 nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineBox*, int*)+ 000BC 03AD8AB0 PPC 0B5510EC nsBlockFrame::ReflowInlineFrames(nsBlockReflowState& , nsLineBox* , int*)+00114 03AD8A30 PPC 0B55133C nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineBox*, nsIFrame*, unsigned char*)+00040 03AD89C0 PPC 0B5578A8 nsLineLayout::ReflowFrame(nsIFrame*, nsIFrame**, unsigned int&)+ 00318 03AD8860 PPC 0B54B094 nsInlineFrame::Reflow(nsIPresContext&, nsHTMLReflowMetrics&, con st nsHTMLReflowState&, unsigned int&)+001B8 03AD87F0 PPC 0B54B3DC nsInlineFrame::ReflowInlineFrames(nsIPresContext*, const nsHTMLR eflowState&, nsInlineFrame::InlineReflowState&, nsHTMLReflowMetrics&, unsigned int&)+000A8 03AD8770 PPC 0B54B810 nsInlineFrame::ReflowInlineFrame(nsIPresContext*, const nsHTMLRe flowState&, nsInlineFrame::InlineReflowState&, nsIFrame*, unsigned int&)+0007C 03AD8700 PPC 0B5578A8 nsLineLayout::ReflowFrame(nsIFrame*, nsIFrame**, unsigned int&)+ 00318 03AD85A0 PPC 0B5413C0 nsHTMLFrameOuterFrame::Reflow(nsIPresContext&, nsHTMLReflowMetri cs&, const nsHTMLReflowState&, unsigned int&)+001E8 03AD8430 PPC 0B3A887C nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext&, nsHTML ReflowMetrics&, const nsHTMLReflowState&, unsigned int&)+00088 03AD83D0 PPC 0B542E5C nsHTMLFrameInnerFrame::Reflow(nsIPresContext&, nsHTMLReflowMetri cs&, const nsHTMLReflowState&, unsigned int&)+0010C 03AD82D0 PPC 0B265C88 nsWebShell::LoadURL(const unsigned short*, nsIPostData*, int, ns URLReloadType, unsigned int)+00054 03AD8280 PPC 0B266F30 nsWebShell::LoadURL(const unsigned short*, const char*, nsIPostD ata*, int, nsURLReloadType, unsigned int)+00398 03AD8130 PPC 0B265FD0 nsWebShell::DoLoadURL(const nsString&, const char*, nsIPostData* , nsURLReloadType, unsigned int)+002DC 03AD8050 PPC 0B25B874 nsDocLoaderImpl::LoadDocument(const nsString&, const char*, nsIC ontentViewerContainer*, nsIPostData*, nsISupports*, nsIStreamObserver*, nsURLReloadType, unsi gned int)+001A8 03AD7FE0 PPC 0B25D670 nsDocumentBindInfo::Bind(const nsString&, nsIPostData*, nsIStrea mListener*)+00124 03AD7F90 PPC 0B25C494 nsDocLoaderImpl::FireOnStartDocumentLoad(nsIURL*, const char*)+0 0078 03AD7F40 PPC 0B25C46C nsDocLoaderImpl::FireOnStartDocumentLoad(nsIURL*, const char*)+0 0050 03AD7EF0 PPC 0B268C58 nsWebShell::OnStartDocumentLoad(nsIURL*, const char* )+000BC 03AD7E60 PPC 0B6F3C38 GlobalWindowImpl::HandleDOMEvent(nsIPresContext&, nsEvent*, nsID OMEvent**, unsigned int, nsEventStatus&)+00048 03AD7E10 PPC 0B43DCD0 nsEventListenerManager::HandleEvent(nsIPresContext&, nsEvent*, n sIDOMEvent**, unsigned int, nsEventStatus&)+00C94 03AD7D20 PPC 0B724658 nsJSEventListener::HandleEvent(nsIDOMEvent*)+00190 03AD7C80 PPC 0B7F10E0 JS_CallFunctionValue+00014 03AD7C40 PPC 0B809570 js_CallFunctionValue+000B8 03AD7B90 PPC 0B809370 js_Invoke+0057C 03AD7AB0 PPC 0B80F1FC js_Interpret+055F0 03AD7890 PPC 0B809370 js_Invoke+0057C 03AD77B0 PPC 0B80F1FC js_Interpret+055F0 03AD7590 PPC 0B809370 js_Invoke+0057C 03AD74B0 PPC 0B80EBA8 js_Interpret+04F9C 03AD7290 PPC 0B817770 js_GetProperty+00224 03AD7210 PPC 0B7180C8 GetHTMLSelectElementProperty(JSContext*, JSObject*, long, long*) +000EC 03AD70A0 PPC 0B4F8CD4 nsHTMLSelectElement::GetSelectedIndex(int*)+00060 Closing log

[QA Assigning to self.]

Set Milestone to M5

looks good now! keep them commin! Your puny attempts to defeat me have failed again elig!!! ;)

"To fight injustice! To right that which is wrong! And to fix all crashing bugs!" ? ;) Hmm...Unfortunately on the 4.30.99 builds of Seamonkey, this crasher remains on Mac OS, Win32 and Linux, so I'm re-opening it for ya. --- a superfriend ;)

[Talkback tracking ID D4041BDN]

As Mike has pointed out, the crash just noted is a totally different bug. (Will write up.) In interim, resetting bug to Resolved/Fixed. Thanks, Mike!

Duh. Someone slap me. This was a duplicate of 5092 all along, and I'm going to re-opened it to resolved it as such.

*** This bug has been marked as a duplicate of 5092 ***

Per a request from Selection and Search component eng (mjudge) and qa (elig), moving all "Selection and Search" bugs to new "Selection" component. Original "Selection and Search" component will be retired.