Closed Bug 276977 Opened 20 years ago Closed 19 years ago

crash firefox by dragging innerHTML around with javascript

Categories

(Firefox :: General, defect)

1.0 Branch
x86
All
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: smunt, Assigned: bugzilla)

References

()

Details

(Keywords: crash, testcase)

Attachments

(2 files)

<HTML>
<BODY onload="doit();">

<SCRIPT language="JavaScript">

function doit()
{
  // somehow this causes the doc.write() to be executed twice
  var div = document.createElement('DIV');
  div.innerHTML = document.body.innerHTML;
  document.body.appendChild(div);
}

document.write("test");

// crashes on 2nd exit
</SCRIPT>

</BODY>
</HTML>
WFM, no crash in Firefox 20050103 and Mozilla 2005010206 trunk builds on Linux.
(Firefox 1.0 on Linux crashes though.)
OS: Windows 2000 → All
I'm running 1.0 by the way, like most people.

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Keywords: crash
Attached file Reporter's testcase
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050408
Firefox/1.0+

WFM on latest-trunk, I get no crash, or anything really. Appears to display a
single word, 'test', on the upper left hand corner of the page, and doesn't
appear to have any sort of issues.
Keywords: testcase
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050407
Firefox/1.0+

What it does is this: prints 'test', but I have the "working in background"
cursor.  I can click and do things in it and the working in background stays,
unless I switch tabs.  When I switch back, back to 'working in background'.

Status bar reads "Done."
(In reply to comment #4)
>
That looks like a seperate issue from what this bug was filed for.  Need to file
another bug for that issue, or find one already filed?

Resolving this WFM


Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → WORKSFORME
The newest version still segfaults my debian system.  Can anyone confirm this
with other platforms?

A backtrace is available on http://qux.nl/firefox-backtrace.txt .
Backtrace is also attached.

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050517 Firefox/1.0.4
(Debian package 1.0.4-2)
Status: RESOLVED → UNCONFIRMED
Resolution: WORKSFORME → ---
no crash with deer park alpha rc on winxp
No crash with current Deer Park Alpha (CVS) on linux (FC3).

Build ID: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050622
Firefox/1.0+
I can confirm the crash at the URL http://qux.nl/kill.html

Win2000, Fx 1.0.5

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.9) Gecko/20050711
Firefox/1.0.5
Confirmed on Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.12) Gecko/20051010 Firefox/1.0.4 (Ubuntu package 1.0.7)
Status: UNCONFIRMED → NEW
Ever confirmed: true
However, not confirmed on Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8) Gecko/20051107 Firefox/1.5.  So far, all the reports for the 1.5 branch are negative.
URL and Testcase WFM using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060602 Minefield/3.0a1 ID:2006060204 [cairo]
Should this bug be closed?
Fixed in 1.5 tree.
Status: NEW → RESOLVED
Closed: 20 years ago19 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: