Closed Bug 291402 Opened 19 years ago Closed 19 years ago

system crashed

Categories

(Core :: Layout: Tables, defect)

All
Other
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 141818

People

(Reporter: gtkdict, Unassigned)

Details

(Keywords: crash, hang, Whiteboard: [sg:dos])

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; zh-CN; rv:1.7.7) Gecko/20050418 Firefox/1.0.3 (Debian package 1.0.3-1)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; zh-CN; rv:1.7.7) Gecko/20050418 Firefox/1.0.3 (Debian package 1.0.3-1)

Please use any mozilla.org product to view the following html file. The problem
is [colspan="20000" rowspan="121237"]. Do you think colspan or rowspan can be so
large? M$ IE and W3C Amaya can correct this problem, but Gecko can't! It alloc
more and more memorys.

<html>
<head>
<title> test </title>
</head>
<body>
<table cellpadding=10 border=1>
<tr>
<td> one </td> <td colspan="20000" rowspan="121237"> two </td>
</tr>
<tr>
<td> 1 </td> <td> 2 </td>
</tr>
</table>
</body>
</html>

Reproducible: Always

Steps to Reproduce:
1.save the following html file:
<html>
<head>
<title> test </title>
</head>
<body>
<table cellpadding=10 border=1>
<tr>
<td> one </td> <td colspan="20000" rowspan="121237"> two </td>
</tr>
<tr>
<td> 1 </td> <td> 2 </td>
</tr>
</table>
</body>
</html>

2.use any mozilla.org product to open this file.

3.see the system memory usage.

Actual Results:  
In my Debian/sid box, system crashed.
I have to reset the computer.

Expected Results:  
Parser the table section, and then correct the colspan value and rowspan value.

This bug already exist a long time.
This works for me on the trunk, confirmed on the 1.0 branch. This was probably
fixed by bug 141818.

*** This bug has been marked as a duplicate of 141818 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Keywords: crash, hang
Resolution: --- → DUPLICATE
Whiteboard: [sg:dos]
You need to log in before you can comment on or make changes to this bug.