282568 - crash when pressing button with onmousedown event connected to it

Status: RESOLVED DUPLICATE of bug 239563

(Firefox :: General, defect)

Description

[Milosz Wasilewski]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041217
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

I've found the bug on simple page used for browser testing. It is probably taken
from mozilla test suite.

Reproducible: Always

Steps to Reproduce:
1. extract TC to some php enabled server
2. open buton_omd.html
3. press button "his is some text that goes on the button."
4. press ok on JS alert

Actual Results:  
browser crash.

Expected Results:  
page with sent variables is shown (echo.php script)

The same behaviour observed on Mozilla 1.7.5 suite.
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041217

I'm not an expert in security area, but I guess there is buffer overlfow
happening. This is possible source of executing unfriendly code.

Comment 1

[Milosz Wasilewski]

Attachment: test case

Comment 2

[Alessio]

crash confirmed on my Mozilla 1.8b too (nightly build ID: 2005020504)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050205

Talkback ID: TB3754624Z

Comment 3

[Alessio]

> 1. extract TC to some php enabled server

PS: there is no need to deploy the testcase on a PHP server, just open the html
page, press the submit button and the crash happens

Comment 4

[Daniel Veditz [:dveditz]]

*** This bug has been marked as a duplicate of 239563 ***