313074 - Wrong mixture of CSS and HTML causes JavaScript to crash Firefox

Status: RESOLVED INCOMPLETE

(Firefox :: General, defect)

Description

[Daniel Rhodes]

User-Agent:       Opera/8.50 (Windows NT 5.1; U; en)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

The sample page at http://daniel.softel.co.jp/firefox_javascript_bug.html cannot 
be opened because Firefox crashes on every attempt. It appears that one very 
specific combination of CSS and HTML causes a line of JavaScript code to crash 
the browser. This is a crasher so please view the *source* at http://daniel.
softel.co.jp/firefox_javascript_bug.txt - there you can find more details in the 
comments. Opera 8.5 and IE6 are both fine and so I think the source code is OK.

Reproducible: Always

Steps to Reproduce:
1. Open http://daniel.softel.co.jp/firefox_javascript_bug.html in Firefox
2.
3.

Actual Results:  
Firefox crashes, the "Mozilla Quality Feedback Agent" launches (if installed) 
and Firefox has to be aborted. Windows XP also launches the Microsoft "Submit 
Error Report" dialogue.

Expected Results:  
Nothing out of the ordinary, just not crash!

Unable/don't know how to obtain DLL module information.
Reproduceable every time in colleague's Firefox (Japanese language version on 
Windows XP).
Have not tested on Linux (yet).

Comment 1

[Kevin Brosnan]

WFM  - Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051019
Firefox/1.5

Comment 2

[Kevin Brosnan]

Crashes 1.0.7 - TB10873655M

Comment 3

[Josh Birnbaum]

WFM with the trunk Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1)
Gecko/20051019 Firefox/1.6a1

Comment 4

[Daniel Rhodes]

I have just tried it on Firefox 1.5 Beta 2 [Mozilla/5.0 (Windows; U; Windows NT 
5.1; en-GB; rv:1.8b5) Gecko/20051006 Firefox/1.4.1] and, while there are no 
crashes or errors, nothing is displayed. It's a kind of empty white document. 
HOWEVER, "View Page Source" from the context menus displays all of the source.

Also, viewing the page in Netscape "based on Firefox" 8.0 seems to alternate 
between the above behaviour (empty document) and the original crash behaviour.

It seems to WFY so I'll look into it a little bit more. 

Comment 5

[Daniel Rhodes]

[Mozilla/5.0 (Windows; U; Windows NT 5.1; ja-JP; rv:1.7.12) Gecko/20050919 
Firefox/1.0.7] also crashes. 

Comment 6

[Daniel Rhodes]

Although this bug doesn't reproduce 100% of the time, it has stopped the conversion of my company's MVC framework from IE-only to W3C standards-compliant. Because it doesn't reproduce 100% of the time (and you guys have more serious bugs!) I'll assign it to myself. Keep up the good work Mozilla team!

Comment 7

[Daniel Rhodes]

[Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050429 White Box/1.0.3-1.4.1.WB1 Firefox/1.0.3] doesn't crash, but like Firefox 1.5 Beta 2 nothing is displayed on the page.

Comment 8

[timeless]

reporter: please try a 1.5 candidate/nightly or trunk build, and report your incident id promptly, make sure that the talkback stack is retrieved from talkback-public before the symbols go stale :(.

Comment 9

[Adam Guthrie]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a1) Gecko/20051125 Firefox/1.6a1

WFM in 1.0.7 and latest trunk.

Comment 10

[Aaron Racine]

It looks like the reported URL is no longer available.

Reporter, are you still seeing this problem with the latest release of Firefox when using a clean profile?

http://kb.mozillazine.org/Profile_Manager

Comment 11

[Carsten Book [:Tomcat]]

marking this bug as incomplete since the testcase-url is no longer valid. 

Reporter: feel free to reopen this bug if you still crash. Please include a url or a testcase then to this bug.