1400 - script can cause an infinite loop

Status: VERIFIED FIXED

(Core :: DOM: Core & HTML, defect, P2)

Description

[buster]

the following script causes an infinite loop.  The superficial cause is the same
thead is added to the table twice (once on create, and again on appendChild.)
The root cause is nsGenericElement::GetNextSibling() uses IndexOf(mContent), and
always returns the index of the first occurance of mContent.

So, either the DOM needs to guard against this sort of thing, or content
iteration needs to be smarter.

	table = document.createElement("TABLE");
	thead = table.createTHead();
	thead.appendChild(currentRow);
	table.appendChild(thead);

Comment 1

[kipp]

Last I checked, vidur was in charge of the dom (and that includes the content
code). I just helped write it :-)

Comment 2

[vidur (gone)]

I don't think this is a P1, so I'm going to downgrade it. Also, I think this is
either a generic content bug or something that table content needs to deal with.
I'll hold onto it for now, since it looks like generic content is being palmed
off to me. :-)

Comment 3

[leger]

Setting all current Open Critical and Major to M3

Comment 4

[Paul MacQuiddy]

per leger, assigning QA contacts to all open bugs without QA contacts according
to list at http://bugzilla.mozilla.org/describecomponents.cgi?product=Browser

Comment 5

[gerardok]

QA contact re-assigned according to the product areas we're currently working
on.

Comment 6

[chris hofmann]

moving to m4.

Comment 7

[vidur (gone)]

Fixed a while ago. Using the DOM methods, content insertion ensures that a node
is removed from its old position before its added to the new one.

Comment 8

[gem]

attempting again to mark as verified.

Comment 9

[Robert Sayre]

RCS file: /cvsroot/mozilla/testing/mochitest/tests/test_bug1400.html,v
done
Checking in test_bug1400.html;
/cvsroot/mozilla/testing/mochitest/tests/test_bug1400.html,v  <--  test_bug1400.html
initial revision: 1.1
done

Comment 10

[sachin shinde]

Attachment: Infinite loop

infinite loop

Comment 11

[sachin shinde]

Hi,

Bug still present in firefox 9.0.1

VERSION
Build identifier: Mozilla/5.0 (Ubuntu; X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1


No infinite loop on chrome and opera (tested)

To reproduce
1>open file in firefox 9.0.1 
2>open web-console(ctrl+shift+k) and check the error