280690 - Marking message with invalid HTML as junk hangs Thunderbird

Status: RESOLVED DUPLICATE of bug 280079

(Thunderbird :: General, defect)

Description

[Jerry Baker]

20050130 trunk

If I mark the attached message as junk, it hangs Thunderbird. If I removed the
very last </font> tag (since there is no opening <font>), everything works
correctly.

Comment 1

[Jerry Baker]

Attachment: The message in question

Comment 2

[Jerry Baker]

Sorry for the spam. Changing severity to major. All spammers have to do to make
an effective DOS against Thunderbird is send malformed HTML messages.

Comment 3

[David :Bienvenu]

stack trace:

nsDebug::Assertion(const char * 0x01e07798 `string', const char * 0x01e077f4
`string', const char * 0x01e07800 `string', int 0x000001c1) line 109
nsScannerIterator::advance(int 0x00003db8) line 449 + 32 bytes
nsScanner::Peek(unsigned short & 0x0000, unsigned int 0x00000001) line 514
nsHTMLTokenizer::ConsumeTag(unsigned short 0x0000, CToken * & 0x00000000,
nsScanner & {...}, int & 0x00000000) line 534 + 14 bytes
nsHTMLTokenizer::ConsumeToken(nsHTMLTokenizer * const 0x049400b0, nsScanner &
{...}, int & 0x00000000) line 491 + 28 bytes
nsParser::Tokenize(int 0x00000000) line 2728 + 26 bytes
nsParser::ResumeParse(int 0x00000000, int 0x00000000, int 0x00000000) line 1908
+ 31 bytes
nsParser::Parse(nsParser * const 0x04940368, const nsAString & {...}, void *
0x00000000, const nsACString & {...}, int 0x00000000, int 0x00000001, nsDTDMode
eDTDMode_autodetect) line 1772 + 17 bytes
HTMLSanitize(const nsString & {...}, nsString & {...}, unsigned int 0x00000000,
const nsAString & {...}) line 2256 + 51 bytes

Comment 4

[David :Bienvenu]

fixed yesterday.

*** This bug has been marked as a duplicate of 280079 ***