Closed
Bug 1115981
Opened 11 years ago
Closed 11 years ago
Crash when using any arrow key on a radio input enclosed in a fieldset, and radio name is the same than fieldset id or enclosed button name
Categories
(Firefox :: Untriaged, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1059030
| Tracking | Status | |
|---|---|---|
| firefox34 | --- | affected |
| firefox35 | --- | unaffected |
| firefox36 | --- | unaffected |
| firefox37 | --- | unaffected |
| firefox-esr31 | --- | affected |
People
(Reporter: bugzilla.mozilla.org, Unassigned)
Details
(Keywords: crash, reproducible, testcase)
Crash Data
Attachments
(1 file)
|
256 bytes,
text/html
|
Details |
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0
Build ID: 20141211175855
Steps to reproduce:
Used arrow key when radio button has focus (to move to next radio button in group in a realistic example). See attachment for minimal working example.
Radio button is enclosed in fieldset whose id is the same as the name of the radio button (cf. Bug 315859). But even if this id is changed, if there is a button with the same name also enclosed in the fieldset, the crash still happens. (Perhaps also related to Bug 343444.)
Actual results:
browser crash
Expected results:
no crash
|
||
Comment 1•11 years ago
|
||
[Tracking Requested - why for this release]: Crash on Esr31
bp-c0da5e64-a8cd-404f-9431-3ae7d2141228
may be Bug 1059030
Status: UNCONFIRMED → RESOLVED
Crash Signature: crash in nsAttrAndChildArray::IndexOfAttr(nsIAtom*, int)
Closed: 11 years ago
status-firefox34:
--- → affected
status-firefox35:
--- → unaffected
status-firefox36:
--- → unaffected
status-firefox37:
--- → unaffected
status-firefox-esr31:
--- → affected
OS: Linux → All
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•