Build ID: 2001071905 0.9.2 branch Steps to reproduce: 1) Load the indicated URL. Actual results: Crash. Expected results: No crash. crash.log coming up (The new build no longer have useful function names. Can the symbols be correlated with function names?)

Ick. Confirming on the trunk also. Linux 2001071921.

Talkback ID TB33119980H

Here's what I get from gdb "Program received signal SIGSEGV, Segmentation fault, 0x2b6ad55c in NSGetModule () from /home/sco/local/mozilla/components/libgkcontent.so " linux trunk 2001071913

The fix I just attached avoids using the owner document of one of the nodes in the range as the factory method for creating the document fragment, using the document to do that is not required since we can simply call NS_NewDocumentFragment(), which is exactly what calling document->CreateDocumentFragment() does. The attached patch doesn't really change anything, except that it avoids trying to call a method in a null pointer, thus avoiding the crash.

This is a duplicate for 3 range bugs. Bugzilla's query page is down right now so I cannot search for the bugs. The bugs deal with: Range.extractContents Range.cloneContents Range.??Contents (forget this one) I re-opened them up with short sample code that causes the crash. Jeff Yates

crashes on windows tooo

PDT+, please check in if you get fully comfortable and fully reviewed.

r/sr=vidur

this bug is a duplicate of bugs: 58974, 58970 and 84208.

pollmann srz r=polmann.

Fix checked in on the branch. Will check in on the trunk soon.

Fixed on the trunk now too.

When you say trunk do you mean the Netscape 6.1 trunk? Jeff

Trunk == mozilla nightly builds, branch == Netscape 6.1

looks good to me checked on 2001-07-21-0.9.2 build

verified on win2000