129287 - challenging javascript busting Gecko

Status: VERIFIED DUPLICATE of bug 98901

(Core :: JavaScript Engine, defect)

Description

[[e-mail]]

From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 4.0)
BuildID:    20020306

Javacript parser cann't handle this script.

Reproducible: Always
Steps to Reproduce:
Goto http://www.sony.com/productregistration

Actual Results:  Mozilla crashes when it tries to evaluate the javascript.

Expected Results:  shouldn't crash

The sony web page contains the most nasty javascript I have ever seen. It has a 
single assignment expression that contains 1656 lines and more then 3300 "+" 
operations. Well every script interpreter has its limit and this one well 
exceeds Gecko's capability. It is busted by stack-overflow when it tries to do 
a recursive call to evaluate the expression.

Comment 1

[Phil Schwartau]

[e-mail]: in your steps to reproduce, you say only:

> Goto http://www.sony.com/productregistration

Is that all, just try to load the site? Because I'm having no trouble
loading it with my Mozilla trunk build, 20020305xx WinNT.

Or do we have to fill out the registration form? If so, please
list all the steps to reproduce. Thanks -

By the way, do you have a Talkback-enabled build? If so, could 
you give me the Talkback IDs of a couple crashes? I'll look them
up and post the stack traces here.

Comment 2

[Matthias Versen [:Matti]]

sounds like bug 98901 but that bug is already fixed...

Comment 3

[Olivier Cahagne]

Reporter, do you still crash with latest nightly build ?
Build available here:
http://ftp.mozilla.org/pub/mozilla/nightly/latest/mozilla-win32-talkback.zip

If crashing, please can you post Talkback ID ?

Comment 4

[John Bandhauer]

I'm convinced this is a dup.

*** This bug has been marked as a duplicate of 98901 ***

Comment 5

[Phil Schwartau]

Marking Verified. Still having no trouble loading this site with 
Mozilla trunk binary 20020314xx on WinNT.