233302 - crash when adding too many options to select element via JavaScript

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[richardtallent]

User-Agent:       
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 Firebird/0.7

If you add "too many" options to a <SELECT> element via JavaScript, the browser
crashes. Happens whether using "s.options[x]=new Option(txt)" or
"s.innerHTML='<option>...'". Length of the option titles does not seem to matter.

Reproduced in Firebird 0.7 and latest Firebird 0.8 builds, but DOES NOT exhibit
in latest Mozilla build (2004020608). Unfortunately, can't find an option here
for a Firebird-only issue

Reproducible: Always
Steps to Reproduce:
<select id="myselect"></select>
<script language="JavaScript">
var nextitem;
var s = document.getElementById('myselect');
for (j = 0; j < 2000; j++)
    {
    nextitem = toCtrl.options.length;
    s.options[nextitem] = new Option(j);
    s.options[nextitem].value = j;
    }
</script>
Actual Results:  
*similar* to above (above is untested), Firebird crashes.

Expected Results:  
Not crash, display all additional search options added.

Comment 1

[Andrew Schultz]

> *similar* to above (above is untested),

above doesn't work at all.  toCtrl=>s

> can't find an option here for a Firebird-only issue

Firebird-only issues are filed under the Firebird product (not "Browser"), but
this type of bug is usually a Gecko (browser) problem rather than Firebird.

Comment 2

[WADA:World Anti-bad-Duping Agency]

Attachment: Test case of 2000 options addition in onClick - based on sample

Test case works for me(with 200404021008-trunk/Win-2K).
Reporter, is this test case cause crash?
Are there any difference between my test case and your real case?

Comment 3

[Gérard Talbot]

Attachment of test case of 2000 options addition in onClick WORKSFORME: Mozilla
1.7b 2004031616 under XP Pro here

Comment 4

[Alfonso Martinez]

Also WFM win98 1.7b