The Mozilla control (build 04/25/99) causes an access violation during processing of the OLEIVERB_INPLACEACTIVATE when used in an MCF app. The same behaviour occurs when an app is patched or when a minimal app is built from scratch. An app that reproduces the problem is PowerMapper, available at http://www.electrum.co.uk/mapper/mapdem20.exe The call stack is CHROME! 01441421() NETLIB! 01121281() NETLIB! 011222f2() XPCOM32! 00a62809() XPCOM32! 00a630de() XPCOM32! 00a6357c() XPCOM32! 00a6396f() NETLIB! 0112209c() RAPTORWEB! 01063291() RAPTORWEB! 01063975() RAPTORWEB! 01063103() RAPTORWEB! 0106680d() RAPTORWEB! 01066a8b() RAPTORWEB! 01066666() NPMOZCTL! 100084e7() NPMOZCTL! 10007914() NPMOZCTL! 1000528b() NPMOZCTL! 100047d4() USER32! 77e7131f() USER32! 77e76d1d() NTDLL! 77f7637b() USER32! 77e76dbb() NPMOZCTL! 1000486c() NPMOZCTL! 100054e6() NPMOZCTL! 10005a76() COleControlSite::DoVerb(long -5, tagMSG * 0x00000000 {msg=??? wp=??? lp=???}) line 629 COleControlSite::CreateControl(CWnd * 0x00431358 {CWebBrowser2 hWnd=0x00000000}, const _GUID & {CLSID_MozillaBrowser Class}, const char * 0x0041bbd4 ??_C@_0L@GNGI@WebBrowser?$AA@, unsigned long 1342177280, const tagPOINT * 0x0012f090 {x=0 y=0}, const tagSIZE * 0x0012f098, unsigned int 100, CFile * 0x00000000 {hFile=??? name=???}, int 0, unsigned short * 0x00000000) line 220 + 15 by COleControlContainer::CreateControl(CWnd * 0x00431358 {CWebBrowser2 hWnd=0x00000000}, const _GUID & {CLSID_MozillaBrowser Class}, const char * 0x0041bbd4 ??_C@_0L@GNGI@WebBrowser?$AA@, unsigned long 1342177280, const tagPOINT * 0x0012f090 {x=0 y=0}, const tagSIZE * 0x0012f098, unsigned int 100, CFile * 0x00000000 {hFile=??? name=???}, int 0, unsigned short * 0x00000000, ...) line 1 CWnd::CreateControl(const _GUID & {CLSID_MozillaBrowser Class}, const char * 0x0041bbd4 ??_C@_0L@GNGI@WebBrowser?$AA@, unsigned long 1342177280, const tagPOINT * 0x0012f090 {x=0 y=0}, const tagSIZE * 0x0012f098, CWnd * 0x00431310 {CMipperView hWnd=0x01300a82}, unsigned int 100, CFile * 0x00000000 {hFile=??? name=???}, int 0, unsigned short * 0x00000000) line 77 CWnd::CreateControl(const _GUID & {CLSID_MozillaBrowser Class}, const char * 0x0041bbd4 ??_C@_0L@GNGI@WebBrowser?$AA@, unsigned long 1342177280, const tagRECT & {top=0 bottom=0 left=0 right=0}, CWnd * 0x00431310 {CMipperView hWnd=0x01300a82}, unsigned int 100, CFile * 0x00000000 {hFile=??? name=???}, int 0, unsigned short * 0x00000000) line 56 CWebBrowser2::Create(const char * 0x0041bbd4 ??_C@_0L@GNGI@WebBrowser?$AA@, unsigned long 1342177280, const tagRECT & {top=0 bottom=0 left=0 right=0}, CWnd * 0x00431310 {CMipperView hWnd=0x01300a82}, unsigned int 100, CFile * 0x00000000 {hFile=??? name=???}, int 0, unsigned short * 0x00000000) line 45 + 49 bytes CMfcTestView::OnCreate(tagCREATESTRUCTA * 0x0012f448) line 303 + 50 bytes

Probably caused by something broken in the chrome and appears to have been fixed

as I can't actually regress this, I'm trusting locka and marking this as verified. mark, if you find this to be broken in a post-19990524xx build, please re-open. thanks!