139277 - Badly formatted URL string in an A HREF causes Mozilla to segfault

Status: VERIFIED DUPLICATE of bug 138877

(SeaMonkey :: General, defect)

Description

[kmccarty]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0rc1) Gecko/20020421
Debian/1.rc1-1
BuildID:    20020421

The Slashdot article at the following URL causes Mozilla
to segfault reliably.  The segfault occurs _after_ the article
title appears in the title bar, but before the HTML is rendered.

http://slashdot.org/articles/02/04/22/1719218.shtml?tid=109

More information posted at these comments:
http://slashdot.org/comments.pl?sid=31513&tid=109&cid=3388775

where the bug is reported for Mozilla 0.9.9 and 1.0 RC1, on both
Linux and Windows platforms.

Reproducible: Always
Steps to Reproduce:
1. Open Mozilla.
2. Go to the afore-mentioned URL.

Actual Results:  Segfault.

Expected Results:  Obviously, _not_ segfault.  Should display the page
(possibly badly if there is a major HTML bug on the page).

I'm using the Debian GNU/Linux 'sid' package of mozilla,
mozilla-browser 1+rc1-1.

Comment 1

[kmccarty]

Looks like Slashdot fixed the problem in their HTML -- it was a badly
formatted URL in an A HREF link.  A short version reproducing the bug
is now available here:

http://www.inbox.com/crashmozilla.html

the tag looks like this:
<A HREF = "&#9619;&#9619;">slashdot.org</A>
but with the &#9619 repeated 16 times.

Comment 2

[Keyser Sose]

*** This bug has been marked as a duplicate of 138877 ***

Comment 3

[Michael Hendy (Hendikins)]

Verifying...