528448 - 100% CPU with broken <img onerror>

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect, P3)

Description

[PikeUK]

Attachment: Reduced Testcase (Causes 100% CPU)

If the onerror attribute of an img element tries to alter the img src to point to a non-existent img Firefox uses 100% CPU until the page is closed. I found this error while browsing http://social.bioware.com/ with images disabled, the site contains the following code:

<img src="../include/js/moofacebox/images/closelabel.gif" title="close" class="facebox-close_image" onerror="this.src='../include/js/moofacebox/images/closelabel.gif'">

I have attached a reduced testcase, I'm not sure if this is considered a Firefox bug but FWIW IE8 immediately pops up a stack overflow error and does not use 100% CPU.

Tested on clean profile with:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.3a1pre) Gecko/20091112 Minefield/3.7a1pre

Comment 1

[Shriram (irc: Mavericks)]

Yeah, on IE 9, CPU's at 50% on iexplore process when testcase's open

However, FF 15.0 on Vista Basic (32-bit) doesn't use cpu 100% anymore. 
Page Faults are on constant rise in small increments for the process tho. 
Is that normal ?

Comment 3

[Martin Kimmerle]

the infinite loop also occurs when the request to the image is blocked by a firefox extension.
See this bug: https://github.com/RequestPolicy/requestpolicy/issues/441#issuecomment-51946393

Comment 4

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1472046

Move all DOM bugs that haven’t been updated in more than 3 years and has no one currently assigned to P5.

If you have questions, please contact :mdaly.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

In the process of migrating remaining bugs to the new severity system, the severity for this bug cannot be automatically determined. Please retriage this bug using the new severity system.

Comment 6

[Hsin-Yi Tsai (she/her)[:hsinyi]]

works for me. Please feel free to file a new bug.