15178 - loading URL causes crash in layout

Status: VERIFIED FIXED

(Core :: Layout, defect, P3)

Description

[Kathleen :Brade]

Loading the http://manta.mcom.com/beans/DNPickerApplet3.html in AppRunner on Mac
causes a crash because NS_GetObjectFramePluginInstance is called with a null
aFrame and then it tries to dereference that pointer.

Comment 1

[av (gone)]

This is crossplatform. Changing platfom.

Comment 2

[rubydoo123]

I also crashed when loading a page with an applet:
http://www.mozilla.org/quality/bft/bft_browser_applet.html

The talkback report is incident #14019743

here is the dump from the report:

 Call Stack:    (Signature = FrameManager::HandlePLEvent 7e5e33ea)
   FrameManager::HandlePLEvent
 [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 523]
   PL_HandleEvent             [plevent.c, line 542]
   PL_ProcessPendingEvents    [plevent.c, line 501]
   _md_EventReceiverProc      [plevent.c, line 974]
   KERNEL32.DLL + 0x3663
   (0xbff73663)
   KERNEL32.DLL + 0x22894
   (0xbff92894)
   0x00638be8

Comment 3

[av (gone)]

This is fixed with my 4.47 pm check in

Comment 4

[Chris Petersen]

With the the Oct 13th build (Mac and Windows), loading this page is no longer
crashing the application.