328170 - Crash demo related to remodeling DOM tree containing iframe in designmode

Status: RESOLVED WORKSFORME

(SeaMonkey :: General, defect)

Description

[Niels]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0

The attached demo moves two DOM elements from one div into another. The first moved element is an iframe in designmode. The browser crashes immediately and its window disappears. Nothing special happens if designmode is set to 'off'.

Reproducible: Always

Steps to Reproduce:

Comment 1

[Niels]

Attachment: testcase: click the button to crash the browser

Comment 2

[Niels]

Firefox 1.5.0.1 does not crash.

Comment 3

[zug_treno]

WFM with SeaMonkey 1.1a/20060116 but reproducible with SeaMonkey 1.1a/20060122.

SeaMonkey 1.0, 1.0+/20060222 and 1.1a/20060222 crash, SeaMonkey 1.0b, 1.5a/20060122 and 1.5a/20060222 do not crash.

Comment 4

[Andrew Schultz]

Do you see the crash with a clean profile / clean install?

Comment 5

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.12) Gecko/20070510 SeaMonkey/1.0.9] (release) (W2Ksp4)

Confirming crash.
But SeaMonkey v1.0.x is not supported anymore.

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.13) Gecko/20080313 SeaMonkey/1.1.9] (release) (W2Ksp4)
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9pre) Gecko/2008051102 SeaMonkey/2.0a1pre] (nightly) (W2Ksp4)

R.WorksForMe.