Closed Bug 216311 Opened 21 years ago Closed 21 years ago

<body onload="onload();"> crashes browser

Categories

(Core :: JavaScript Engine, defect)

PowerPC
macOS
defect
Not set
critical

Tracking

()

VERIFIED DUPLICATE of bug 201828

People

(Reporter: waterson, Assigned: rogerl)

Details

(Keywords: crash, testcase)

Attachments

(3 files)

Stumbled onto this while hacking web pages. This'll crash the current trunk. Don't even have a debug build, so haven't looked at skidmarks yet. <html> <body onload="onload();"></body> </html>
Attached file test case
Keywords: testcase
Severity: normal → critical
wfm with a 6h old CVS trunk on win2k Can you please attach a OS X crash log ?
Attached file Backtrace on Linux
Bug occurs in ~3 hour old CVS tree on Linux
Attached file crash log
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5b) Gecko/20030813 Mozilla Firebird/0.6.1+ OS:Mac OSX 10.2.6 It does not Crash, if the Java Script option is set as OFF.
-> JS Engine (or DOM0 ?)
Assignee: general → rogerl
Component: Browser-General → JavaScript Engine
QA Contact: general → pschwartau
looks like a dupe of bug 201828 *** This bug has been marked as a duplicate of 201828 ***
Status: NEW → RESOLVED
Closed: 21 years ago
Resolution: --- → DUPLICATE
sure verified
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: