<server> inside of <div> causes hard crash

VERIFIED FIXED in M18

Status

()

P3
critical
VERIFIED FIXED
19 years ago
10 years ago

People

(Reporter: rcummins, Assigned: harishd)

Tracking

({crash, testcase})

Trunk
x86
Windows 95
crash, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [nsbeta3+] Fix in hand, URL)

Attachments

(2 attachments)

(Reporter)

Description

19 years ago
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win95; en-US; m16) Gecko/20000613
BuildID:    2000062808

Mozilla will lock up (hang) while loading http://www.eeye.com

Reproducible: Always
Steps to Reproduce:
1. Start Mozilla
2. View http://www.eeye.com

Actual Results:  Browser locks up, does not consume CPU

Expected Results:  Page should be loaded

The problem at http://www.eeye.com has been boiled down to
the following HTML:

<html>
<head><title></title></head>
<body>
Text Here
<div>
<server>
</server>
</div>
</body>
</html>

...this sample can be found at http://www.burlco.lib.nj.us/moz/lockup/ and will
lock Mozilla up tight.  Couldn't find an existing similar bug in bugzilla.

Comment 1

19 years ago
Created attachment 10781 [details]
testcase, simplified a bit more

Comment 2

19 years ago
confirming, and uploaded a bit more simplified testcase...basicly if there's a
<server>...</server> anywhere inside of a <div> it crashes HARD.  (note: you can
add text in anywhere, it doesn't have to do with a </server></div> or
anything)...the only thing is that I've never seen the <server> tag before...
Status: UNCONFIRMED → NEW
Ever confirmed: true
Summary: Mozilla locks (hangs) on http://www.eeye.com → <server> inside of <div> causes hard crash

Updated

19 years ago
Keywords: testcase

Comment 3

19 years ago
the server tag is some non-standard tag for running server-side js in the
process of serving the page to the browser, I think.  I don't crash here but I
do lock up.  testing on 062909 build with NT

Comment 4

19 years ago
moving to parser, but could be a dom 0 issue, as it works in ns 4.7...
Assignee: asa → rickg
Component: Browser-General → Parser
QA Contact: doronr → janc

Comment 5

19 years ago
Adding crash keyword
Keywords: crash

Comment 6

19 years ago
Harish, I'm reassigning rickg parser bugs to you.
Assignee: rickg → harishd
(Assignee)

Comment 7

19 years ago
Created attachment 11204 [details] [diff] [review]
Proposed patch..
(Assignee)

Updated

19 years ago
Status: NEW → ASSIGNED
Whiteboard: Fix in hand
(Assignee)

Comment 8

19 years ago
Putting on beta3 radar.
Keywords: nsbeta3
(Assignee)

Updated

18 years ago
Target Milestone: --- → M18

Comment 9

18 years ago
Marking nsbeta3+...
Whiteboard: Fix in hand → [nsbeta3+] Fix in hand
(Assignee)

Comment 10

18 years ago
Enabaled SERVER tag. Marking FIXED.
Status: ASSIGNED → RESOLVED
Last Resolved: 18 years ago
Resolution: --- → FIXED

Comment 11

18 years ago
Verified
2000-08-18-08-M18 : Win95
2000-08-18-06-M18 : Linux
2000-08-18-08-M18 : Mac
Status: RESOLVED → VERIFIED

Comment 12

10 years ago
Crashtest added as part of http://hg.mozilla.org/mozilla-central/rev/5a6def05ccbc
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.