276607 - Open that page up in firefox and it crashes the browser

Status: RESOLVED WORKSFORME

(Core Graveyard :: GFX: Gtk, defect)

Description

[codewarrior2]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041121 Firefox/1.0
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041121 Firefox/1.0

If you open the page http://www.tomaw.plus.com/mangled.html (which was generated
by http://bcheck.scanit.be/bcheck/mangle.php ) in firefox 1.0, it crashes firefox.

Reproducible: Always

Steps to Reproduce:
1.Open webpage at http://www.tomaw.plus.com/mangled.html
2. Firefox crashes

Actual Results:  
Firefox crashed.

Expected Results:  
It should have loaded the incorrect html as much as it could, and ignored the
rest, instead of crashing.

I will try to attach the html once the bug is filed although I don't know if it
will work. As for my configuration, im using 
Noia 2.0 version 2.77 for my theme
and these extensions:
DOM Inspector 1.0
Tabbrowser Preferences 0.6.5
Diggler 0.9

OS: gentoo
"uname -a" : Linux desktop 2.6.8-gentoo-r1 #1 Fri Aug 20 00:31:12 EST 2004 i686
Intel(R) Pentium(R) 4 CPU 1500MHz GenuineIntel GNU/Linux

Comment 1

[codewarrior2]

Attachment: This should be the html that crashes the browser if I attached it correctly

WARNING!
THIS ATTACHMENT IF CORRECT WILL CRASH FIREFOX!
WARNING!

Comment 2

[timeless]

doesn't crash me on osx

Comment 3

[Inactive]

No crash here on Win XP or SuSE after running the scanit.be test for 30 minutes.
However, Firefox consumes an enormous amount of RAM during the test (200-250MB)
and does not release it upon closing the window/tab in which the test was run.

Comment 4

[Mats Palmgren (inactive)]

WFM, 2004-12-29-05 trunk Linux.

Can you reproduce it with a current trunk build?
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/
ftp://ftp.mozilla.org/pub/mozilla.org/mozilla/nightly/latest-trunk/

Comment 5

[Boris Zbarsky [:bzbarsky]]

Dup of one of the many dependencies of bug 264944 that have been fixed....

Marking worksforme, since it does in a current Linux trunk build.