38011 - Crash in nsTreeFrame::ContainsFlexibleColumn (after un-selecting option from drop down list in the Search Bookmarks/History dialog)

Status: VERIFIED DUPLICATE of bug 33524

(SeaMonkey :: Bookmarks & History, defect, P3)

Description

[Daniel McAuliffe]

Overview Description:

An illegal operation error is occuring when un-selecting a search result 
options from the drop down list within the Search Bookmarks/History dialog

Steps to Reproduce:
1)From the Search menu option select Search Booksmarks/History

2)Find dialog should appear.

3)In the top right corner of the bookmark search results list is a down arrow.  
While there isn't any search results select the down arrow.

4) With the down arrow selected all options should be ticked.  When any of 
these options are un-selected the illegal operation occurs.

Actual Results:

MOZILLA caused an invalid page fault in
module GKHTML.DLL at 0167:0150ab8e.
Registers:
EAX=00000000 CS=0167 EIP=0150ab8e EFLGS=00010246
EBX=00000004 SS=016f ESP=0068f4c8 EBP=0068f570
ECX=0068f57c DS=016f ESI=00000000 FS=0e97
EDX=00000000 ES=016f EDI=01c1d64c GS=0000
Bytes at CS:EIP:
8b 06 51 56 ff 50 28 68 c8 6f 5a 01 ff 15 80 b4 
Stack dump:
01bff808 00000000 60d51ed0 00000000 0000003f 00000001 00000000 00000000 
00720000 00650075 00680000 0068f778 00000002 0068f93c 00000001 02300160 

Expected Results:

Should be able to un-select any of these headings.

Reproducibility:

Everytime.

Build Date & Platform Bug Found:

01/05/2000 11 - Windows 98

Additional Builds and Platforms Tested On:

Nil

Additional Information:

Comment 1

[Hugh Kennedy]

confirming with 2000050111 on win NT.

Comment 2

[Andreas Franke (gone)]

Attachment: stace trace, PC/Linux, build 2000042809

Comment 3

[Andreas Franke (gone)]

Actually, you have to mouseover the "down arrow" again to trigger the crash.
It happens in
#0  nsTreeFrame::ContainsFlexibleColumn ()
#1  nsTreeCellFrame::CanResize ()
#2  nsTreeCellFrame::GetCursor ()
#3  nsEventStateManager::UpdateCursor ()

Adding crash keyword, setting severity to critical, resummarizing.

Comment 4

[Andreas Franke (gone)]

This crash happens since 4/14 when the "down arrow" menu in the top right corner
was created. Reassigning to [e-mail], because of

http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=SeaMonkeyAll&branch=HEAD&branchtype=match&dir=&file=&filetype=regexp&who=rjc%25netscape.com&whotype=match&sortby=Date&hours=2&date=explicit&mindate=04%2F13%2F2000+08%3A00%3A00&maxdate=04%2F14%2F2000+08%3A00%3A00&cvsroot=%2Fcvsroot

Comment 5

[Robert John Churchill]

David?

Comment 6

[Claudius Gayle]

Oh My God. please fix this bug. It is yet another dupe of bug 33524. Everywhere in the app where we use that little widget 
crashes!


*** This bug has been marked as a duplicate of 33524 ***

Comment 7

[Claudius Gayle]

VERIFIED Dupe