306105 - Crash if the first <option> element in a <select> has "display:none"

Status: RESOLVED DUPLICATE of bug 302356

(Core :: Layout: Form Controls, defect)

Description

[Sergiu Dumitriu]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050712 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050712 Firefox/1.0+

If the first <option> element has "display: none", when expanding the combobox
and moving the mouse over the dropdown list the browser crashes.

I noticed this in Deerpark Alpha 2. Firefox 1.0.6 works fine.

Reproducible: Always

Steps to Reproduce:
1.
  <select id="chwChartSubtypeInput" name="chwChartSubtypeInput">
    <optgroup label="Bar subtype">
      <option style="display: none">A</option>
      <option>B</option>
    </optgroup>
    <optgroup label="subtype">
      <option>C</option>
      <option>D</option>
    </optgroup>
    <optgroup label="subtype2">
      <option selected="selected">E</option>
      <option>F</option>
    </optgroup>
  </select>
2. Expand the combobox
3. Move the mouse down over the dropdown list
4. Expect a crash

Actual Results:  
The browser crashes

Expected Results:  
The first visible option is selected

Comment 1

[Sergiu Dumitriu]

The crash occurs only when there are <optgroup> elements also. Leaving only
<option> elements works fine.

Comment 2

[Adam Guthrie]

Please provide a talkback ID for the crash. http://kb.mozillazine.org/Talkback

Comment 3

[Felix Miata]

Attachment: testcase from comment 0

crashed for me on OS/2 Deer Park 2

Comment 4

[Adam Guthrie]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a1) Gecko/20050827 Firefox/1.6a1
ID:2005082708

WFM.

Comment 5

[Felix Miata]

Talkback ID TB8771636G on Linux on Deer Park 2

Comment 6

[Adam Guthrie]

I'm pretty sure this is the same as bug 302356 for which the fix was checked in
on 2005-08-07.

*** This bug has been marked as a duplicate of 302356 ***