Go to www.webvan.com. Click the "shopping" button in the top frame. Crash in: PowerPC unmapped memory exception at 0AA7EE38 nsScriptSecurityManager::GetSubjectPrincipal(JS Context*, nsIPrincipal**)+000B4 Calling chain using A6/R1 links Back chain ISA Caller 00000000 PPC 09507160 0A0DB440 PPC 09503904 main+00084 0A0DB3E0 PPC 0950360C main1(int, char**)+00498 0A0DB2E0 PPC 0D6AD418 nsAppShellService::Run()+00020 0A0DB2A0 PPC 0B08D008 nsAppShell::Run()+00050 0A0DB220 PPC 0B08DDAC nsMacMessagePump::DoMessagePump()+00044 0A0DB1D0 PPC 0B08E0B4 nsMacMessagePump::DispatchEvent(int, EventRecord*)+ 00188 0A0DB180 PPC 0D7956D0 Repeater::DoRepeaters(const EventRecord&)+00034 0A0DB140 PPC 0B06BBCC nsToolkit::RepeatAction(const EventRecord&)+00044 0A0DB100 PPC 0B359524 nsEventQueueServiceImpl::ProcessEvents()+0002C 0A0DB0C0 PPC 0B354B58 nsHashtable::Enumerate(int (*)(nsHashKey*, void*, void*), void*) +0003C 0A0DB080 PPC 0D79D79C PL_HashTableEnumerateEntries+00060 0A0DB010 PPC 0B354398 _hashEnumerate(PLHashEntry*, int, void*)+00030 0A0DAFD0 PPC 0B359484 EventDispatchingFunc(nsHashKey*, void*, void*)+0003C 0A0DAF90 PPC 0B36F568 nsEventQueueImpl::ProcessPendingEvents()+00018 0A0DAF50 PPC 0D79C668 PL_ProcessPendingEvents+00078 0A0DAF00 PPC 0D79C79C PL_HandleEvent+0004C 0A0DAEC0 PPC 0AEEFA10 HandlePLEvent(OnLinkClickEvent*)+00014 0A0DAE80 PPC 0AEEFAA8 OnLinkClickEvent::HandleEvent()+0004C 0A0DAE40 PPC 0AEF0418 nsWebShell::HandleLinkClickEvent(nsIContent*, nsLinkVerb, const unsigned short*, const unsigned short*, nsIInputStream*)+000B8 0A0DADA0 PPC 0AEEAD3C nsWebShell::LoadURL(const unsigned short*, nsIInputStream*, int, unsigned int, unsigned int, nsISupports*)+00064 0A0DAD60 PPC 0AEEDD20 nsWebShell::LoadURL(const unsigned short*, const char*, nsIInput Stream*, int, unsigned int, unsigned int, nsISupports*)+004C4 0A0DAAF0 PPC 0AEED11C nsWebShell::LoadURI(nsIURI*, const char*, nsIInputStream*, int, unsigned int, unsigned int, nsISupports*)+00588 0A0DA9C0 PPC 0AEEB994 nsWebShell::DoLoadURL(nsIURI*, const char*, nsIInputStream*, uns igned int, unsigned int)+00878 0A0DA7C0 PPC 0AEDB520 nsDocLoaderImpl::LoadDocument(nsIURI*, const char*, nsIContentVi ewerContainer*, nsIInputStream*, nsISupports*, nsIStreamObserver*, unsigned int, unsigned int )+00168 0A0DA740 PPC 0AEDE970 nsDocumentBindInfo::Bind(nsIURI*, nsIStreamListener* , nsIInputSt ream*)+0011C 0A0DA6B0 PPC 0D7938A8 NS_OpenURI(nsIChannel**, nsIURI*, nsILoadGroup*, nsIEventSinkGet ter*)+000DC 0A0DA630 PPC 0AEFF4D0 nsIOService::NewChannelFromURI(const char*, nsIURI*, nsILoadGrou p*, nsIEventSinkGetter*, nsIChannel**)+00178 0A0DA5A0 PPC 0A950894 nsJSProtocolHandler::NewChannel(const char*, nsIURI* , nsILoadGro up*, nsIEventSinkGetter*, nsIChannel**)+000A4 0A0DA500 PPC 0A94FF08 NS_NewJSInputStream(const char*, nsIURI*, nsIEventSinkGetter*, n sIInputStream**)+00180 0A0DA470 PPC 0AA7DBD0 nsScriptSecurityManager::GetSubjectPrincipal(nsIPrincipal**)+000 CC Closing log Tested on both mac and win32

Norris, could this be caps stuff? Lob it back if not. Mike

Null pointer dereference fixed. I'm still seeing some problems in JavaScript object locking, but that appears to be covered by 14049.

fixing component.

No longer crashes, but shopping button does still not work. *** Timing layout process on url: 'javascript:ChgImage('shopping/cats.asp','shoptb.jpg',shopImage.src','yes')', webshell: 0EB4AE20 Javascript Error: TypeError: document.TopTb.toptbimg has no properties 14049 is set resolved/fixed and javascript:'hi' and javascript:alert('hi') work

Updated summary to reflect current behavior.

The latest problem is that the image named 'toptbimg' inside form named 'TopTb' is not reflected into JavaScript "document.TopTb.toptbimg". Reassigning to DOM.

Fixed on 12/21/1999. Images, Objects, etc. weren't getting reflected as named elements into their containing form.

Verified fixed.