6959 - infinite loop in nsStr::FindSubstr

Status: VERIFIED FIXED

(Core :: DOM: HTML Parser, defect, P3)

Description

[buster]

infinite loop in parser calling nsStr::FindSubstr opening url.

stack:
nsStr::FindSubstr() line 449
nsString::Find() line 1143 + 43 bytes
DetermineParseMode() line 442 + 16 bytes
nsParser::WillBuildModel() line 477 + 9 bytes
nsParser::ResumeParse() line 779 + 27 bytes
nsParser::OnDataAvailable() line 1004 + 17 bytes
nsDocumentBindInfo::OnDataAvailable() line 1498 + 24 bytes
OnDataAvailableProxyEvent::HandleEvent() line 633
StreamListenerProxyEvent::HandlePLEvent() line 472 + 12 bytes
PL_HandleEvent() line 491 + 10 bytes
PL_ProcessPendingEvents() line 452 + 9 bytes
_md_EventReceiverProc() line 868 + 9 bytes


locals:
	matches	0
	theSubIndex	2
	theNewStartPos	192
	theFirstTargetChar	78
	theTargetMax	8
	theLastTargetChar	83
-	aDest	{...}
	mLength	300
	mCapacity	512
	mCharSize	eTwoByte
	mOwnsBuffer	1
+	mStr	0x0154d028 "<"
+	mUStr	0x0154d028
-	aTarget	{...}
	mLength	8
	mCapacity	0
	mCharSize	eOneByte
	mOwnsBuffer	0
+	mStr	0x005ba29c "NOQUIRKS"
+	mUStr	0x005ba29c
	aIgnoreCase	0
	anOffset	0
	index	192
	theMax	292

Comment 1

[rickg]

Thanks Steve: I owe you a beer!

Comment 2

[rickg]

So the real value of porn is to help us debug, is that right?
(This is fixed in my tree, and will get checkin in soon enough)

Comment 3

[rickg]

This is fixed in my tree, and I'll check it in shortly.

Comment 4

[rickg]

Fixed by change to bufferroutines.h

Comment 5

[Jan Carpenter]

Verified 1999-06-15-16-M7