Closed Bug 68912 Opened 24 years ago Closed 23 years ago

Crash assigning to HTMLElement Property TR.cells

Categories

(Core :: Layout: Tables, defect)

x86
All
defect
Not set
major

Tracking

()

VERIFIED FIXED
mozilla0.9

People

(Reporter: bc, Assigned: karnaze)

Details

(Keywords: crash, dom1, testcase)

Attachments

(3 files)

Crash assigning to HTMLElement Property TR.cells. Mozilla Trunk Build
2001-02-13-20/Win2k

Steps to reproduce:

1.  elm = document.createElement('tr');
2.  elm.cells = null;

Expected Result: not crash
Actual Result:   crash

Reproducible: always

Note: this is the only HTML 4.0 HTMLElement Property assignment that causes a crash.

On a side note: IE 5.5 crashes for FRAME.frameBorder and LI.value. It also does
something weird for APPLET.codeType. ;)
adding crash and testcase keywords
Keywords: crash, testcase
I see this on Linux too (2001-02-14-21).  Going to attach stack trace.
OS: Windows 2000 → All
->HTMLTables
Assignee: clayton → karnaze
Component: HTML Element → HTMLTables
Keywords: dom1
QA Contact: gerardok → chrisd
moving to m0.9
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9
Keywords: patch
The patch is checked in.
Status: ASSIGNED → RESOLVED
Closed: 23 years ago
Resolution: --- → FIXED
QA contact update
QA Contact: chrisd → amar
 It does not crash anymore.. Marking verified
Status: RESOLVED → VERIFIED
Crashtest added as part of http://hg.mozilla.org/mozilla-central/rev/5a6def05ccbc
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: