353713 - Calling document.write on documentElement.innerHTML while the page loads pegs CPU and memory grows

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[Robert Sayre]

Similar to bug 185945, but much nastier.

In the console, this repeats endlessly:

JavaScript error: file:///Users/sayrer/Desktop/props.html, line 16: too much recursion
###!!! ASSERTION: GC preservation didn't work: 'Not Reached', file /Users/sayrer/firefox/mozilla/dom/src/base/nsJSUtils.cpp, line 280
###!!! ASSERTION: listener wasn't preserved properly: 'eventListener', file /Users/sayrer/firefox/mozilla/content/events/src/nsEventListenerManager.cpp, line 1733
JavaScript error: file:///Users/sayrer/Desktop/props.html, line 26: too much recursion
###!!! ASSERTION: GC preservation didn't work: 'Not Reached', file /Users/sayrer/firefox/mozilla/dom/src/base/nsJSUtils.cpp, line 280
###!!! ASSERTION: listener wasn't preserved properly: 'eventListener', file /Users/sayrer/firefox/mozilla/content/events/src/nsEventListenerManager.cpp, line 1733

Comment 1

[Robert Sayre]

Attachment: demo as plaintext

Comment 2

[Lucas Adamski [:ladamski]]

Can't repro.

Comment 3

[Brandon Sterne (:bsterne)]

I can't reproduce this on trunk either.  I see in the error console a bunch of these:

Error: uncaught exception: [Exception... "Component returned failure code: 0x8000ffff (NS_ERROR_UNEXPECTED) [nsIDOMNSHTMLDocument.write]"  nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)"  location: "JS frame :: http://bsterne/test/bugs/353713/props.html :: <TOP_LEVEL> :: line 24"  data: no]
Source File: http://bsterne/test/bugs/353713/props.html
Line: 24

I'm going to resolve WORKSFORME since neither Lucas or I can repro.

Comment 4

[Daniel Veditz [:dveditz]]

Ditto on the 1.8.1.x branch

Comment 5

[Jesse Ruderman]

I just get 211*

WARNING: NS_ENSURE_TRUE(!mTooDeepWriteRecursion) failed: file /Users/jruderman/central/content/html/document/src/nsHTMLDocument.cpp, line 2146

The test takes about 2 seconds, so I optimistically added it to the crashtest suite.

Comment 6

[Jesse Ruderman]

I had to disable the test due to intermittent orange.  I filed 469626 for
making a better test.