Crash assigning to HTMLElement Property TR.cells. Mozilla Trunk Build 2001-02-13-20/Win2k Steps to reproduce: 1. elm = document.createElement('tr'); 2. elm.cells = null; Expected Result: not crash Actual Result: crash Reproducible: always Note: this is the only HTML 4.0 HTMLElement Property assignment that causes a crash. On a side note: IE 5.5 crashes for FRAME.frameBorder and LI.value. It also does something weird for APPLET.codeType. ;)
adding crash and testcase keywords
I see this on Linux too (2001-02-14-21). Going to attach stack trace.
moving to m0.9
The patch is checked in.
QA contact update
It does not crash anymore.. Marking verified
Crashtest added as part of http://hg.mozilla.org/mozilla-central/rev/5a6def05ccbc