When dealing with a framset document mBody will be NULL, but DidBuildModel() is called anyway. Down at the bottom of the function there's some code that informs the document that content has been appended: mDocument->ContentAppended(mBody, mBodyChildCount); I added a NULL pointer check around the call (and an additional call that I added, which had been crashing), but we probably shouldn't be calling this function at all for framesets

Setting all current Open/Normal to M4.

per leger, assigning QA contacts to all open bugs without QA contacts according to list at http://bugzilla.mozilla.org/describecomponents.cgi?product=Browser

QA contact re-assigned according to the product areas we're currently working on.

I think that this should be handled either in the parser or content-sink, and thats harishd so I'm reassigning...

The call to the DidBuildModel() is made by the parser. But, there is no reason why the parser should ignore that call for frameset documents. I think that this issue is totally related to the content sink. Since the sink, now, handles such calls, after troy's changes, I'm marking the bug fixed.

veriified by developer.