722083 - OOM crash on HTML Markup broken site

Status: RESOLVED INCOMPLETE

(Core :: DOM: Core & HTML, defect, P5)

Description

[Alice0775 White]

Build Identifier:
http://hg.mozilla.org/mozilla-central/rev/c07595bee6cf
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a1) Gecko/20120127 Firefox/12.0a1 ID:20120127031148

Browser crashes on HTML Markup broken site .

Reproducible: Always

Steps to Reproduce:
1. Start Firefox with clean profile
2. Open http://www.mozdev.org/projects/nav.html

Actual Results:
  Browser crashes,
  
Expected Results:
  Browser should not crash,

Comment 1

[henryfhchan]

Browser crashes on page with infinite page length (and hence DOM Tree).
IE terminates after 62 KB.
Should Firefox terminate page loading after 64KB?

Comment 2

[Scoobidiver (away)]

The 64-bit build hangs but doesn't crash.

Comment 3

[Boris Zbarsky [:bzbarsky]]

> The 64-bit build hangs but doesn't crash.

Probably because it doesn't run out of address space?

Oh, and the page is not infinite at all.  It's only about 60MB of HTML.  ;)

Comment 4

[Scoobidiver (away)]

If I wait long enough, the 32-bit build crashes: bp-aac421b1-dc1c-41eb-9bca-9d6422120215.

Comment 5

[Immatix]

Build identifier: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120327 Firefox/13.0a2

Crash still occurs, but only after running out of memory it seems.

Comment 6

[Wayne Mery (:wsmwk)]

(In reply to Immatix from comment #5)
> Build identifier: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0)
> Gecko/20120327 Firefox/13.0a2
> 
> Crash still occurs, but only after running out of memory it seems.

yes.
@ EMPTY: no crashing thread identified; corrupt dump
bp-6c6af667-89a6-484e-9f31-eca5f2130710

Comment 8

[Wayne Mery (:wsmwk)]

mozdev is gone