Firefox crashes on malformed HTML [@ js3250.dll ]

VERIFIED FIXED

Status

()

defect
--
critical
VERIFIED FIXED
15 years ago
5 years ago

People

(Reporter: pavel.penaz, Assigned: timeless)

Tracking

({crash, stackwanted, testcase})

unspecified
x86
Windows XP
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(2 attachments, 1 obsolete attachment)

(Reporter)

Description

15 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041224 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041224 Firefox/1.0+

Firefox crashes when I click the testcase.

Reproducible: Always

Steps to Reproduce:
(Reporter)

Comment 1

15 years ago
Posted file testcase (crash)
Crashes Firefox..
(Reporter)

Comment 2

15 years ago
I could not obtain talkback data because I cannot find downloadable talkback.xpi
working with Firefox Tinderbox builds.
Blocks: Zalewski
(Reporter)

Updated

15 years ago
Keywords: crash, testcase

Comment 3

15 years ago
WFM, no crash, 20041222 PC/WinXP
TB2732184 with 20041223

Updated

15 years ago
Keywords: stackwanted
Summary: Firefox crashes on malformed HTML → Firefox crashes on malformed HTML [@ js3250.dll ]

Comment 5

15 years ago
Confirmed on Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6)
Gecko/20041224 Firefox/1.0+ (stipe)

Updated

15 years ago
Status: UNCONFIRMED → NEW
Ever confirmed: true

Comment 6

15 years ago
I can't dup with ff 1.0 but I crash with recent trunk. Could it be the recent
e4x checkin? it seems to crash if you feed the js engine the * character. ie
<script>*</script> will cause a crash. Sounds familiar, though I can't remember
if there is a dup...
(Reporter)

Comment 7

15 years ago
WFM with zip trunk build from 20041222, crashes with 20041223..

Comment 8

15 years ago
cc'ing brendan

Comment 9

15 years ago
Posted file stack trace
(Assignee)

Comment 10

15 years ago
Posted patch change test to match use (obsolete) — Splinter Review
Assignee: firefox → timeless
Status: NEW → ASSIGNED
Attachment #169603 - Flags: review?(brendan)
Thanks for patching, timeless (typo in patch, but it reminded me that I had a
patch for this too, over under dom/ -- I forgot to land it when at shaver's
behest I enabled E4X).  Fixed.

/be
Status: ASSIGNED → RESOLVED
Last Resolved: 15 years ago
Resolution: --- → FIXED
(Assignee)

Comment 12

15 years ago
Comment on attachment 169603 [details] [diff] [review]
change test to match use

bah, the version i had neil test didn't include a typo
Attachment #169603 - Attachment is obsolete: true
Attachment #169603 - Flags: review?(brendan)
(Reporter)

Comment 13

15 years ago
WFM with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6)
Gecko/20050101 Firefox/1.0+
Status: RESOLVED → VERIFIED

Comment 14

10 years ago
dom/src/base/crashtests/275912-1.html
http://hg.mozilla.org/mozilla-central/rev/b0337b6287f3
Flags: in-testsuite+
Crash Signature: [@ js3250.dll ]
You need to log in before you can comment on or make changes to this bug.