Happening in builds from March 8/9, 1999 (don't know if it happened before that). Solaris 2.6, Purify, and gcc 2.7.2.3. Initial conjecture is that this is caused by the (displaySelection) ? ip : nsnull in the lines shortly before 1313 of nsTextFrame.cpp causing ip to not be initialized. **** Purify instrumented ./apprunner.pure (pid 1154) **** UMR: Uninitialized memory read (86 times): * This is occurring while in: TextFrame::PaintAsciiText(nsIPresContext&,nsIRenderingContext&,nsIStyleContext*, TextFrame::TextStyle&,int,int) [nsTextFrame.cpp:1313] TextFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTextFrame.cpp:549] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4524] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4476] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4524] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4476] nsAreaFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsAreaFrame.cpp:222] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsContainerFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsContainerFrame.cpp:216] nsTableCellFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableCellFrame.cpp:204] nsTableRowFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowFrame.cpp:348] nsTableRowFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowFrame.cpp:304] nsTableRowGroupFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowGroupFrame.cpp:288] nsTableRowGroupFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowGroupFrame.cpp:246] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsContainerFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsContainerFrame.cpp:216] nsTableFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableFrame.cpp:2315] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsContainerFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsContainerFrame.cpp:216] nsTableOuterFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableOuterFrame.cpp:138] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4524] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4476] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4524] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4476] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:276] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4524] * Reading 4 bytes from 0xefffacd0 on the stack. * Address 0xefffacd0 is 128 bytes past start of local variable "indicies" in function TextFrame::PaintAsciiText(nsIPresContext&,nsIRenderingContext&,nsIStyleContext*, TextFrame::TextStyle&,int,int).

fixed! Once again, thanks for running purify!

If only I could take credit for running purify but alas, 'twas not I. On that note, could either the reporter or engineer crank up purify and verify(and mark it VERIFIED) this bug as I am without the expertise and tools to do so?

Per a request from Selection and Search component eng (mjudge) and qa (elig), moving all "Selection and Search" bugs to new "Selection" component. Original "Selection and Search" component will be retired.