Overview Description: crash when (mis)using the PSM dialogs Steps to Reproduce: 1) click on the security padlock icon to bring up the PSM dialog 2) click on the "Certificates" tab 3) click on the "Restore" button to bring up the filepicker 4) bring the PSM dialog to the front again, and click on the "Close" button -- this will not do anything (apparently) [and it shouldn't if the filepicker is supposed to be modal] 5) ... continuing the abuse ... click on the X for the PSM dialog to (forcibly) close the PSM dialog window 6) hit "Cancel" on the filepicker dialog Actual Results: after the "Cancel", the browser will crash Expected Results: no crash Reproducibility: always Build Date & Platform Bug Found: 2000040413 win2k and winNT Additional Builds and Platforms Tested On: will check mac and linux in a moment Additional Information: talkback stack trace nsWebShell::HandleLinkClickEvent [d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 2123] OnLinkClickEvent::HandleEvent [d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 2016] PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 564] PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 527] _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 1020] USER32.DLL + 0x3eb0 (0x77e13eb0) USER32.DLL + 0x401a (0x77e1401a) USER32.DLL + 0x92da (0x77e192da) nsAppShellService::Run [d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 366] netscp6.exe + 0x1929 (0x00401929) netscp6.exe + 0x15ad (0x004015ad) netscp6.exe + 0x2612 (0x00402612) KERNEL32.DLL + 0x7903 (0x77e87903) Starting with PSM, but cc: travis for webshell (?)

Sounds like a dialog/window problem, not a securiy related problem. I have seen similar behavior on other windows, specifically the preferences dialog. Peter, do you have other bugs similar to this?

No, Daniel gets thrown to all such beasts. reassigning to danm as p2 for m16

Mass-moving all M16 non-feature bugs to M17, which we still consider to be part of beta2

Adding crash keyword.

No crash using 42709 verification build on Win98. On Linux, restore button just blanks the dialog panel - no filepicker is displayed. Mac has no PSM, doesn't respond to click on lock. jrgm, do you still see this?

using a build from apr28 on win95 -- no I do not get a crash using PSM. However, I can't confirm in a current build on linux and win32, as the PSM UI is not available (bug #37730). And mac PSM is not functional at all. Will check again later.

Can't reproduce this crash on win95 20000510nn. Linux is blank as Peter notes and I'll file/find a bug on that point. Mac PSM is not working at all (a known bug).

Verified worksforme.