43164 - exception not thrown for CharacterData.substringData

Status: RESOLVED DUPLICATE of bug 16610

(Core :: DOM: Core & HTML, defect, P4)

Description

[ckritzer (gone)]

Overview: The INDEX_SIZE_ERR is not being thrown when the specified count is 
negative.  An example of the parameters for 
CharacterData.substringData(offset,count) would be:
document.getElementsByTagName("BODY".item(0).firstChild.substringData(28,-1);  
The INDEX_SIZE_ERR is not being thrown for that -1.

Steps to Reproduce:
1) Launch 2000-06-19-xx build.
2) Load http://bubblegum/ngdriver/dom1/cdex001.html (or attached testcase)

Actual Results: No exception is thrown

Expected Results: INDEX_SIZE_ERR thrown

Platforms Found/Tested on:
- MacOS9 2000-06-19-08-M17 Commercial
- Linux6 2000-06-19-20-M17 Commercial
- Win98  2000-06-19-21-M17 Commercial

Additional Comments:  Nominating nsbeta2

Comment 1

[ckritzer (gone)]

Setting self as QAContact. 
 
Nominating nsbeta2:  Negative numbers in the items count of a string manipulation 
could cause very bad things to happen. "Hello string.  I'd like to remove -3 
characters from you."  Removing 3 things is easy.  Removing -3 things is bad.

Comment 2

[ckritzer (gone)]

URLs to testcase examples (until I submit simplified ones):

http://bubblegum/ngdriver/suites/dom1/cex001.html
http://bubblegum/ngdriver/suites/dom1/cex003.html
http://bubblegum/ngdriver/suites/dom1/cex004.html

Comment 3

[ckritzer (gone)]

*** Bug 43172 has been marked as a duplicate of this bug. ***

Comment 4

[ckritzer (gone)]

Additional URLs to testcase samples:
http://bubblegum/ngdriver/suites/dom1/cdex028.html
http://bubblegum/ngdriver/suites/dom1/cdex029.html

Comment 5

[Johnny Stenback (:jst)]

Accepting and setting M17 for now...

Comment 6

[Jay Patel [:jay]]

Putting on [NEED INFO] radar. PDT needs to know impact to user and risk of fix 
to make a call on this bug. We need to know what "bad things" might occur as a 
result of this bug.

Comment 7

[Jay Patel [:jay]]

Putting on [nsbeta2-] radar. Not critical to beta2. 

Comment 8

[ekrock's old account (dead)]

Marking FUTURE. If I understand correctly, the workaround is simple: don't be
dumb and pass negative numbers in this case in your code. ;->

Comment 9

[Jan Carpenter]

Mass update of qa contact

Comment 10

[Prashant Desale]

QA contact Update

Comment 11

[Prashant Desale]

Updating QA contact to Shivakiran Tummala.

Comment 12

[Brian Clark]

Tested with Mozilla 0.9.3 for MacOS 9.1.  Still a bug.  You can verify this by
running Netscapes "tc_htxt500a Test Text Properties" test available from the DOM
HTML Level 2 Conformance test, available from this link:

http://developer.netscape.com/evangelism/tools/testsuites/

Comment 13

[Fabian Guisset]

P4 and normal, to reflect bug 16610. This might be a dup of bug 16610

Comment 14

[Johnny Stenback (:jst)]

Mass-reassigning bugs to [e-mail]

Comment 15

[Peter Van der Beken [:peterv]]

*** This bug has been marked as a duplicate of 16610 ***