63707 - Crash if the <object>'s data isn't found

Status: RESOLVED DUPLICATE of bug 57026

(Core :: Layout, defect, P1)

Description

[Koike Kazuhiko]

If the <object>'s data isn't found and its contents have
start tag and end tag, Mozilla crashes.

For example,

<object type="image/png" data="testimage.png">
<p>Test</p>
</object>

Crash happens if "testimage.png" doesn't exist.

I saw Linux build and Win32 build crashed.

Comment 1

[Koike Kazuhiko]

Attachment: Testcase

Comment 2

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Probably duplicate of bug 59426, as noted there.

Comment 3

[Jubal Kessler]

Also noted the crash, same test case when visiting http://openprojects.nu/.
Offending code is:

<OBJECT>
<H2>About</H2>
</OBJECT>

Comment 4

[Loco]

FWIW, still crashing Mac build 2001-01-04-08.  It didn't even blink....very nasty 
crash.  Should we make this a P1???

Comment 5

[Loco]

From 59426:
------- Additional Comments From [e-mail] 2000-12-11 17:07 -------

crashes are P1

-----------------------
Although I'm inclined to mark this bug as a dup of that one....

Comment 6

[Andreas Franke (gone)]

There is absolutely no need to mark this P1, mark one bug dependency of the
other or doing any more QA work. It's all the same. In bug 57026, there is a fix
available from Chris Waterson that fixes all the real world testcases:
http://bugzilla.mozilla.org/showattachment.cgi?attach_id=20571
It's been sitting there since early November, or mid December, depending on how
you count. It has been super-reviewed, and all that needs to be done is checking
it in. I have applied the patch to a Jan 2nd nightly, and it fixes this bug and
all the other dupes I've tried. 
Since Chris Waterson seems to be very busy at the moment with doing memory
analysis (at least it seems so from reading .porkjockeys), could someone with
checkin priviledges please ask him if it's ok to check it in for him?

Blake? *Please*...

Comment 7

[Loco]

Solution is simple...another dependency:).  Helps me remember, anyway, and I'd 
rather do a little extra work than forget to check up on bugs that will most 
likely be solved by a related fix.

Comment 8

[Ian Zink]

This problem is fixed in the 1-10-2001 build.

Comment 9

[Loco]

Verified in bug 57026.  Indeed, it was a DUPLICATE.

Mac OS 01-11-04, Win NT 01-11-04.


*** This bug has been marked as a duplicate of 57026 ***

Comment 10

[Loco]

Adding qawanted KW.  Sorry about the spam.

Comment 11

[Loco]

Qawanted doesn't belong here, sorry folks.

Comment 12

[Hixie (not reading bugmail)]

Reassigning QA Contact for all open and unverified bugs previously under Lorca's
care to Gerardo as per phone conversation this morning.

Comment 13

[bsharma]

qa contact updated.

Comment 14

[Heikki Toivonen (remove -bugzilla when emailing directly)]

SPAM. HTML Element component is deprecated, changing to Layout component. See
bug 88132 for details.

Comment 15

[Heikki Toivonen (remove -bugzilla when emailing directly)]

Come on Bugzilla, you can do it...