371357 - When you try to load a malformed html then firefox crash

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Javier Ballesteros]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1

When you try to load a malformed html the firefox crash (the server woth all tabs). The malformed html is <script>*<script>alert("Hello");</script>

* means repetition. Some thousands of this special word causes crash firefox

Reproducible: Always

Steps to Reproduce:
1.Create a malformed html
2.Open it
3.You must restar the firefox
Actual Results:  
When you try to load a malformed html the firefox crash (the server woth all tabs). The malformed html is <script>*<script>alert("Hello");</script>

* means repetition. Some thousands of this special word causes crash firefox

Expected Results:  
The firefox crash

Open the html or not open, but not crash firefox.

Comment 1

[Dave Townsend [:mossop] (PTO until July 20)]

Can you get a talkback ID for the crash and possibly attach a testcase that causes firefox to crash?

http://kb.mozillazine.org/Talkback

Comment 2

[Javier Ballesteros]

Attachment: Malformed html?

Comment 3

[Javier Ballesteros]

(In reply to comment #1)
> Can you get a talkback ID for the crash and possibly attach a testcase that
> causes firefox to crash?
> http://kb.mozillazine.org/Talkback

Hi:

I can't get the ID talkback. The firefox crash and the talkback fon't show anything

Comment 4

[Dave Townsend [:mossop] (PTO until July 20)]

Testcase does not crash for me on either Firefox 2.0.0.2 or current Minefield on Mac.

Comment 5

[Ria Klaassen (not reading all bugmail)]

Yeah, it crashes indeed Firefox 2.0.0.1, but not latest branch (Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2pre) Gecko/20070213 BonEcho/2.0.0.2pre). So the next update will contain the fix.

Comment 6

[Brian Polidoro]

I get a too much recursion error in the console with minefield on WinXP.  So this could have been fixed by something like bug 347155.  

Comment 7

[Carsten Book [:Tomcat]]

Javier, can you confirm this is fixed in Firefox 2.0.0.4 ?

Comment 8

[Javier Ballesteros]

In Firefox 2.0.0.4 is fixed. At least, since 2.0.0.2 is fixed