57063 - Drag and drop link from frame to elsewhere in frameset > crash

Status: RESOLVED WORKSFORME

(Core :: XUL, defect, P3)

Description

[kirun]

Dragging and dropping a link frome somewhere in a frame to elsewhere in the same
frame causes the browser to crash.

This has happened at both Yahoo! Mail and Spumco. I was unable to make it crash
on a locally stored frameset file, and a normal page.

I am currently using the M18 / SVG build.

Comment 1

[kirun]

Crash at spumco.com:

MOZILLA caused an invalid page fault in
module <unknown> at 0000:505b2727.
Registers:
EAX=00000001 CS=014f EIP=505b2727 EFLGS=00010246
EBX=01e223b0 SS=0157 ESP=0070ca70 EBP=0070caa0
ECX=0242c1f0 DS=0157 ESI=00971430 FS=29b7
EDX=ffffffff ES=0157 EDI=011388c0 GS=0000
Bytes at CS:EIP:

Stack dump:
015a13e9 0242bb00 00971430 0070dd18 008b612c 30012b92 008b612c 0070cab8 30007b2a
008b66a4 00971430 1003079c 0070cab0 100307ac 015a13e4 0070cad4

Comment 2

[John Morrison]

Not seeing this in a current trunk debug build or branch opt. build on win2k.
I will try that build and win95 later today. (I wonder if the mozilla M18
branch included pinkerton's D&D fix, which I think he said could have been 
causing some other 'bad things' to happen).

Comment 3

[Peter Trudelle]

resolving as wfm, please reopen if you can reproduce in a current build.

Comment 4

[John Morrison]

I tried this on win98, and again on win2k with the mozilla m18 SVG/MATHML/XSLT
build, and could not reproduce this crash -- how common an occurence is it 
for you? (Unfortunately, that build is not apparently talkback enabled).

Comment 5

[kirun]

This seems to occour more frequently at spumco , compared to the other pages. It
therefore doesn't always happen.

I've now also had it crash when moving to a different frame.

I'll try again with a new build and see what happens.

Comment 6

[kirun]

I can't get 2000101804 to crash in the same way.

Comment 7

[kirun]

I have had one crash with this (2000103004), but cannot reliably reproduce

TB20428283M