90529 - Crash on this URL after making selection from the drop-down list and going back

Status: VERIFIED DUPLICATE of bug 88343

(Core :: Layout: Form Controls, defect)

Description

[marina]

**** observed with 2001-07-11-0.9.2 build ****
Steps to reproduce:
- go the abobe URL;
- choose a tab "sell an item"; 
- choose ( eg.:electronics);
- select cameras, digital;
- click "back" to go back;
//note: nscp will crash
stack to follow

Comment 1

[marina]

Incident ID 32821881 

Comment 2

[Matthias Versen [:Matti]]

confirming with win2k build 20010711.. (CVS debug)

[e-mail] changed the line with the crash with rev. 1.199, fixed June / 
07 (bug 53165)
-> HTML Form Controls

A part of the Stack :
nsListControlFrame::SetContentSelected(int 1, int 1, int 1, nsIPresShell * 
0x00000000) line 2016 + 3 bytes
nsListControlFrame::ResetList(nsIPresContext * 0x039b9048, nsVoidArray * 
0x00000000) line 2265
nsListControlFrame::Reflow(nsListControlFrame * const 0x045e37c0, nsIPresContext 
* 0x039b9048, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 707
nsLineLayout::ReflowFrame(nsIFrame * 0x045e37c0, nsIFrame * * 0x0012ab20, 
unsigned int & 0, nsHTMLReflowMetrics * 0x00000000, int & 0) line 962 + 43 bytes
nsBlockFrame::ReflowInlineFrame(nsBlockReflowState & {...}, nsLineLayout & 
{...}, nsLineBox * 0x045e4108, nsIFrame * 0x045e37c0, unsigned char * 
0x0012a0b4) line 3460 + 29 bytes
nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState & {...}, nsLineLayout & 
{...}, nsLineBox * 0x045e4108, int * 0x0012a71c, unsigned char * 0x0012a578, int 
0, int 0) line 3344 + 28 bytes
nsBlockFrame::DoReflowInlineFramesAuto(nsBlockReflowState & {...}, nsLineBox * 
0x045e4108, int * 0x0012a71c, unsigned char * 0x0012a578, int 0, int 0) line 
3269 + 42 bytes
nsBlockFrame::ReflowInlineFrames(nsBlockReflowState & {...}, nsLineBox * 
0x045e4108, int * 0x0012a71c, int 0, int 0) line 3213 + 32 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineBox * 0x045e4108, int 
* 0x0012a71c, int 0) line 2359 + 29 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2049 + 27 bytes

Comment 3

[Matthias Versen [:Matti]]

based on the stack...

*** This bug has been marked as a duplicate of 88343 ***

Comment 4

[Vladimir Ermakov]

verifying