29052 - doc.open->doc.write->doc.close in onLoad handler casues crash

Status: VERIFIED FIXED

(Core :: DOM: Core & HTML, defect, P3)

Description

[Robert Ginda]

The attached testcase crashes mozilla.

Steps to reproduce:
1) save the attached files as docwrite.html and docwrite.css
2) start mozilla and load docwrite.html?onload
(the ?onload tells the testcase to execute doOpen, doWrite, doClose, and
doLocate in the on load handler)
2) mozilla crashes.

Points of interest:
1) try loading docwrite.html without the ?onload
   click, in order, open, write, close
   mozilla will not crash.

2) in docwrite.html, change var writeStyle = true; to var writeStyle = false;
   load docwrite.html?onload
   mozilla will not crash

Comment 1

[Robert Ginda]

Attachment: docwrite.html

Comment 2

[Robert Ginda]

Attachment: docwrite.css

Comment 3

[Chris Waterson]

vidur: sounds like a generic document.write() bug. do you know about this? if 
not, i'm willing to poke at it for a while.

Comment 4

[Chris Waterson]

vidur, giving this to you.

Comment 5

[vidur (gone)]

Seems to work for me on Windows on a 2/28/2000 build. Rob says he'll get an 
updated linux build for me to test on.

Comment 6

[vidur (gone)]

Seems to work for me on Linux as well. Tempted to mark this WORKSFORME, but I'll 
wait till Rob can confirm.

Comment 7

[Robert Ginda]

Thanks for waiting.  My build is about done, I'll see what's the dillio.

Comment 8

[Robert Ginda]

I SURE this used to crash!  Oh well.  It seems to work now, as does bug 29053. 
Marking both WORKSFORME.

Comment 9

[Robert Ginda]

Vidur, I think I found the problem here.  The I attached the testcase with var
writestyle=false, which doesn't crash the browser.  Could you verify that
setting writestyle=true and running the testcase crashes for you?

Comment 10

[Robert Ginda]

Re-opening.  Change writeStyle=false to writeStyle=true in the testcase to see
the crash.

Comment 11

[Robert Ginda]

Changing to DOM 0, reassigning to component owner.

Comment 12

[Johnny Stenback (:jst)]

This appears to be fixed now, I tested changing the writeStyle but no crash,
marking FIXED.

Comment 13

[Prashant Desale]

Robert, do you want to verify this one ?
I don't see crash, but you'd be better person to verify.

Comment 14

[Robert Ginda]

verified fixed