Build ID: 2000051210 Summary says it all. GPF: MOZILLA caused an invalid page fault in module <unknown> at 0141:00000013. Registers: EAX=80004075 CS=0167 EIP=00000013 EFLGS=00010202 EBX=01b21041 SS=016f ESP=0068dd78 EBP=020c23a4 ECX=d42f0c02 DS=016f ESI=0068de70 FS=3567 EDX=0068dd64 ES=016f EDI=00000000 GS=0000 Bytes at CS:EIP: 00 54 ff 00 f0 73 96 00 f0 53 ff 00 f0 00 00 6f Stack dump: 0068df78 0068e14c 020c2370 00000000 00000000 40000000 40000000 00905830 00000000 00000005 009061a0 00000000 40000000 40000000 00000000 00000000 Talkbalk data will be sent as soon as I can get through to the server.

#0 nsAttributeContent::ParseAttributeString (this=0x869e874, aStr=@0xbfffcb08, aName=@0xbfffcae8, aNameSpaceID=@0x415ba2c6) at nsAttributeContent.cpp:120 #1 0x415ba421 in nsTableRowGroupFrame::GetLine (this=0x869e784, aLineNumber=0, aFirstFrameOnLine=0xbfffcbf0, aNumFramesOnLine=0xbfffcbec, aLineBounds=@0xbfffcccc, aLineFlags=0xbfffcbe8) at nsTableRowGroupFrame.cpp:1686 #2 0x415d8b4c in nsBoxToBlockAdaptor::Reflow (this=0x869f408, aState=@0xbfffcf08, aPresContext=0x85c1828, aDesiredSize=@0xbfffcdd8, aReflowState=@0xbfffd08c, aStatus=@0xbfffce08, aX=0, aY=0, aWidth=1073741824, aHeight=1073741824, aMoveFrame=1) at nsBoxToBlockAdaptor.cpp:737 #3 0x415d7b08 in nsBoxToBlockAdaptor::GetPrefSize (this=0x869f408, aState=@0xbfffcf08, aSize=@0xbfffcee8) at nsBoxToBlockAdaptor.cpp:182 #4 0x41439266 in nsScrollPortFrame::GetPrefSize (this=0x869e874, aBoxLayoutState=@0xbfffcf08, aSize=@0xbfffcee8) at nsScrollPortFrame.cpp:372 #5 0x414366f8 in nsGfxScrollFrame::GetPrefSize (this=0x869e7c8, aState=@0xbfffcf08, aSize=@0xbfffcee8) at nsGfxScrollFrame.cpp:451 #6 0x415e8fcf in nsBoxFrame::Reflow (this=0x869e7cc, aPresContext=0x85c1828, aDesiredSize=@0xbfffd1e0, aReflowState=@0xbfffd08c, aStatus=@0xbfffd82c) at nsBoxFrame.cpp:650 #7 0x41436b6e in nsGfxScrollFrame::Reflow (this=0x869e7c8, aPresContext=0x85c1828, aDesiredSize=@0xbfffd1e0, aReflowState=@0xbfffd08c, aStatus=@0xbfffd82c) at nsGfxScrollFrame.cpp:551 #8 0x413dce21 in nsContainerFrame::ReflowChild (this=0x869e4d0, aKidFrame=0x869e7cc, aPresContext=0x85c1828, aDesiredSize=@0xbfffd1e0, aReflowState=@0xbfffd08c, aX=0, aY=315, aFlags=0, aStatus=@0xbfffd82c) at nsContainerFrame.cpp:643 #9 0x415a7f2d in nsTableFrame::ResizeReflowPass1 (this=0x869e4d0, aPresContext=0x85c1828, aDesiredSize=@0xbfffd57c, aReflowState=@0xbfffd448, aStatus=@0xbfffd82c, aStartingFrame=0x0, aReason=eReflowReason_Initial, aDoSiblingFrames=1) at nsTableFrame.cpp:1767 #10 0x415a7618 in nsTableFrame::Reflow (this=0x869e4d0, aPresContext=0x85c1828, aDesiredSize=@0xbfffd57c, aReflowState=@0xbfffd448, aStatus=@0xbfffd82c) at nsTableFrame.cpp:1572 #11 0x413dce21 in nsContainerFrame::ReflowChild (this=0x868116c, aKidFrame=0x869e4d0, aPresContext=0x85c1828, aDesiredSize=@0xbfffd57c, aReflowState=@0xbfffd448, aX=0, aY=0, aFlags=3, aStatus=@0xbfffd82c) at nsContainerFrame.cpp:643 #12 0x415b1031 in nsTableOuterFrame::OuterReflowChild (this=0x868116c, aPresContext=0x85c1828, aChildFrame=0x869e4d0, aOuterRS=@0xbfffd6cc, aMetrics=@0xbfffd57c, aAvailWidth=0x0, aDesiredSize=@0xbfffd554, aMargin=@0xbfffd55c, aPadding=@0xbfffd56c, aReflowReason=eReflowReason_Initial, aStatus=@0xbfffd82c) at nsTableOuterFrame.cpp:873 #13 0x415b291d in nsTableOuterFrame::Reflow (this=0x868116c, aPresContext=0x85c1828, aDesiredSize=@0xbfffd930, aOuterRS=@0xbfffd6cc, aStatus=@0xbfffd82c) at nsTableOuterFrame.cpp:1395 #14 0x413d8812 in nsBlockReflowContext::ReflowBlock (this=0xbfffd8f0, aFrame=0x868116c, aSpace=@0xbfffd838, aApplyTopMargin=1, aPrevBottomMargin=0, aIsAdjacentWithTop=0, aComputedOffsets=@0xbfffd848, aFrameReflowStatus=@0xbfffd82c) at nsBlockReflowContext.cpp:469

karnaze is this yours?

I'm not seeing this on my 5/8 WinNT debug build. I need to repull today.

you're right; seems to be working now (2000051508 win98)

Using 7/18 Viewer, no crash. Verifying bug fixed.