160816 - This URL hangs Mozilla, but not IE (nsCellMap::GetDataAt issue)

Status: RESOLVED WORKSFORME

(Core :: Layout: Tables, defect, P3)

Description

[David Morton]

My mozilla hangs when going to this URL (VERSION 1.0/WIN XP).

Comment 1

[Matthias Versen [:Matti]]

it seems that it's looping here :
nsTableRowGroupFrame::CalculateRowHeights(nsIPresContext * 0x05bd9658,
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, nsTableRowFrame *
0x00000000) line 698 + 15 bytes
nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x0721c038,
nsIPresContext * 0x05bd9658, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 1239

-> Html Tables

Comment 2

[Boris Zbarsky [:bzbarsky]]

A profile shows us using 95% of out pageload time in
nsCellMap::GetDataAt(nsTableCellMap &, int, int, int)

Comment 3

[Jerry]

it also hangs on sparc with 20020804 .
so change its platform as all

Comment 4

[Jerry]

Attachment: testcase

the first td  set its colspan as 1078, that is the problem, 
if remove it , it is ok.

Other tr has only one td, so set colspan as 1078 has no sense.
seems like html code error.

Comment 5

[Jerry]

Attachment: hang testcase

sorry for my mistake, this new one is hang testcase.
testcase 94285 show the differenct of mozilla and IE.

Comment 6

[Jerry]

*** This bug has been marked as a duplicate of 86293 ***

Comment 7

[Bernd]

this is not a dupe

Comment 8

[Andrew Schultz]

*** Bug 198827 has been marked as a duplicate of this bug. ***

Comment 9

[karnaze (gone)]

mass reassign to default owner

Comment 10

[Boris Zbarsky [:bzbarsky]]

*** Bug 214370 has been marked as a duplicate of this bug. ***

Comment 11

[Bernd]

*** Bug 261966 has been marked as a duplicate of this bug. ***

Comment 12

[Martijn Wargers (dead)]

The "hang testcase" hangs Mozilla1.7, but loads instantly in current trunk build.
Is this bug WFM, now?

Comment 13

[Bernd]

I love it when difficult to debug hangs go WFM

Comment 14

[Bernd]

but we need to reopen the still hanging dups