152316 - navigator crash if there is a fieldset element with style="position:absolute" in the page [@ nsBlockBandData::Init]

Status: RESOLVED DUPLICATE of bug 130251

(Core :: Layout, defect, P2)

Description

[julien]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.0) Gecko/20020530
BuildID:    200253012

navigator crash if there is a html fieldset element with
style="position:absolute" in the page. exemple
<html>
<fieldset style="position:absolute">
<legend>crash</legend>
</fieldset>
</html>

Reproducible: Always
Steps to Reproduce:
1.copy the provided HTML on a file
2.read the file with mozilla
3.crash

Actual Results:  crash

Expected Results:  not crash

it's a crash bug, but hopefully, the fieldset element is not really used

Comment 1

[julien]

it seems that the presence of the legend subtag is important.

Comment 2

[Moiz Dohadwala]

Reproduced on Win2k, sp2, build 2002053012 ( 1.0 release build )
Talkback id: TB7202283K

Comment 3

[Oddsson]

WFM Win2k Build 2002061707.

Comment 4

[Oddsson]

Attachment: Test case

Test case with valid HTML from bug description. (This FWM though).

Comment 5

[julien]

Reproduced on Win98SE build(2002051006 )(1.0)
not Reproduced on linux mandrake8.2 i586 build 2002061106 1.1a)(can see the
fieldset the legend abd the button

Comment 6

[Johnny Stenback (:jst)]

Attachment: Stacktrace

Comment 7

[Johnny Stenback (:jst)]

Branch only crash, confirming and sending over to layout.

Comment 8

[julien]

no bug with win98SE and mozilla build 2002061104 (1.1alpha)

Comment 9

[Arthur]

Confirming (this time for real). Crashes under linux as well with 2002061707 1.0
branch. TB7435542G.

Comment 10

[Adam Hauner]

Bug 147920 has same first 2 lines of stack signature.

Comment 11

[Chris Petersen]

Hmm. I can't reproduce this problem when opening test case with latest OS X
branch (2002-07-01-03)

Comment 12

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

It was branch only while the fix hadn't been checked in to the branch yet.

*** This bug has been marked as a duplicate of 130251 ***