Crash assigning to HTMLElement Property TR.cells

VERIFIED FIXED in mozilla0.9

Status

()

Core
Layout: Tables
--
major
VERIFIED FIXED
17 years ago
9 years ago

People

(Reporter: bc, Assigned: karnaze (gone))

Tracking

({crash, dom1, testcase})

Trunk
mozilla0.9
x86
All
crash, dom1, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(3 attachments)

(Reporter)

Description

17 years ago
Crash assigning to HTMLElement Property TR.cells. Mozilla Trunk Build
2001-02-13-20/Win2k

Steps to reproduce:

1.  elm = document.createElement('tr');
2.  elm.cells = null;

Expected Result: not crash
Actual Result:   crash

Reproducible: always

Note: this is the only HTML 4.0 HTMLElement Property assignment that causes a crash.

On a side note: IE 5.5 crashes for FRAME.frameBorder and LI.value. It also does
something weird for APPLET.codeType. ;)
(Reporter)

Comment 1

17 years ago
Created attachment 25336 [details]
Testcase - crash when TR.cells = null
(Reporter)

Comment 2

17 years ago
adding crash and testcase keywords
Keywords: crash, testcase
I see this on Linux too (2001-02-14-21).  Going to attach stack trace.
OS: Windows 2000 → All
Created attachment 25413 [details]
Stack trace from the crash
->HTMLTables
Assignee: clayton → karnaze
Component: HTML Element → HTMLTables
Keywords: dom1
QA Contact: gerardok → chrisd
(Assignee)

Comment 6

17 years ago
moving to m0.9
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9
(Assignee)

Comment 7

17 years ago
Created attachment 27764 [details] [diff] [review]
patch to fix the crash
(Assignee)

Updated

17 years ago
Keywords: patch
(Assignee)

Comment 8

17 years ago
The patch is checked in.
Status: ASSIGNED → RESOLVED
Last Resolved: 17 years ago
Resolution: --- → FIXED

Comment 9

17 years ago
QA contact update
QA Contact: chrisd → amar

Comment 10

17 years ago
 It does not crash anymore.. Marking verified
Status: RESOLVED → VERIFIED

Comment 11

9 years ago
Crashtest added as part of http://hg.mozilla.org/mozilla-central/rev/5a6def05ccbc
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.