(270.784): Access violation – code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000000 ebx=0000001f ecx=05b29f30 edx=0000000c esi=00000000 edi=06070f78
eip=3d0e107d esp=02d29de4 ebp=02d29df0 […] mshtml!CMshtmlEd::Exec+0x131:
3d0e107d 8b7f08 mov edi,dword ptr [edi+8] ds:0023:06070f80=????????
0:008> !heap -p -a edi
address 06070f78 found in
_DPH_HEAP_ROOT @ 141000
in free-ed allocation ( DPH_HEAP_BLOCK: VirtAddr VirtSize)
55a8418: 6070000 2000
7c927553 ntdll!RtlFreeHeap+0x000000f9
3d0602c4 mshtml!CMshtmlEd::Release+0x00000025
3d2fec6c mshtml!CHTMLEditor::DeleteCommandTarget+0x00000034
3d2fa581 mshtml!CHTMLEditor::RemoveContainer+0x00000167
3d16b500 mshtml!CHTMLEditor::Notify+0x00000026
3cf347c0 mshtml!CHTMLEditorProxy::Notify+0x00000021
3cf34682 mshtml!CDoc::NotifySelection+0x00000059
3d0f1691 mshtml!COmWindowProxy::SwitchMarkup+0x00000347
3d074d6c mshtml!CDocument::open+0x00000471
3d073c42 mshtml!CDocument::write+0x00000081
[…]