299867 - crash if 'select' is hidden by handler function

Status: RESOLVED DUPLICATE of bug 231830

(Firefox :: General, defect)

Description

[Vasily Fedoseyev]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050509 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050509 Firefox/1.0.4

Firefox crashes, if javascript onChange handler function tries to set
style.display='none' for caller object when onChange caused by keypress.

Reproducible: Always

Steps to Reproduce:
1. html code:
<script> function test(t) { t.style.display='none'; } </script>
<select size=3 id='sel' onChange='test(this)'>
<option>1</option><option>2</option></select>

2. by pressing 'tab' set focus to the 'select'
3. press up/down
4. see error message about access violation
Actual Results:  
browser crashes, data entered in form lost

Expected Results:  
select element's value changed, it is hidden

access violation in firefox.exe

Comment 1

[jayfromtaiwan]

Confirming

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050706
Firefox/1.0.5

But works on the lastest trunk build tho ... so something must've been changed.
I will do more research on that.

Recommend --> Core - Javascript Engine (for now)

Comment 2

[timeless]

[e-mail]: i recommend you don't make recommendations.

would someone please reproduce this with a talkback enabled build?

Comment 3

[Vasily Fedoseyev]

1.0.5 and newest at the moment 1.0.6 are affected by this bug too...

Comment 4

[Vasily Fedoseyev]

seems to be fixed in 1.5 beta

Comment 5

[Martijn Wargers (dead)]

*** This bug has been marked as a duplicate of 231830 ***