304533 - crash on document.createElement with illegal tag name

Status: RESOLVED DUPLICATE of bug 285166

(Core :: DOM: Core & HTML, defect)

Description

[Rahul Narain]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6

If a script tries to create an element with an illegal tag name, for example
"#text", Firefox crashes.

Reproducible: Always

Steps to Reproduce:
1. Make a HTML page containing <script>document.createElement("#text");</script>
2. Open in Firefox.
3.

Actual Results:  
Firefox crashes.

Expected Results:  
Firefox should catch the error and stay alive.

Comment 1

[Rahul Narain]

Attachment: Testcase (warning: may crash browser)

Comment 2

[Dave Townsend [:mossop]]

Works for me.

Please try with a newer build of firefox such as deer park alpha 2 or later.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050812
Firefox/1.0+ ID:2005081216

Comment 3

[Hermann Schwab]

works on trunk, crashs on 1.7 branch

wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.9a1) Gecko/20050812 Firefox/1.0+
Error: uncaught exception: [Exception... "String contains an invalid character"
 code: "5" nsresult: "0x80530005 (NS_ERROR_DOM_INVALID_CHARACTER_ERR)" 
location: "https://bugzilla.mozilla.org/attachment.cgi?id=192586 Line: 3"]

crash: TB8336498M
Mozilla/5.0 (Windows; U; Win98; de-DE; rv:1.7.10) Gecko/20050715 Firefox/1.0.6

Comment 4

[Aiko]

Duplicate of bug 285166.

Comment 5

[Dave Townsend [:mossop]]

*** This bug has been marked as a duplicate of 285166 ***