Closed
Bug 746323
Opened 13 years ago
Closed 13 years ago
Closing a tag and beginning a new one on the same line is crashing in View Source.
Categories
(Core :: DOM: HTML Parser, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 742414
People
(Reporter: deadowlsurvivor, Unassigned)
Details
(Keywords: crash, reproducible)
Crash Data
Attachments
(1 file)
297 bytes,
text/html
|
Details |
User Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:11.0) Gecko/20100101 Firefox/11.0
Build ID: 20120310010757
Steps to reproduce:
To try to better manage whitespace, I started coding such that the following pattern occurred a lot.
m/\s*></
I tried to view source in Firefox to review my code. I am using the Ubuntu 11.04 distro, but I also had a co-worker reproduce this on his Windows 7 machine with Firefox. It's also valid tag markup according to some XML documentation I read, though I don't know how directly XML tag markup is related to HTML tag markup.
The source:
<!DOCTYPE html>
<html
><head
><meta
http-equiv="Content-Type"
content="text/html; charset=utf-8"
/><script
></script
><script
></script
><script
></script
><script
></script
><title
>Firefox Fail Test</title
></head
><body
></body
></html>
Actual results:
Firefox crashed, although if I reduce the number of "/\s*></", the size off the text in the source view merely increases following.
Expected results:
Firefox should show my source code as-is and not crash.
Reporter | ||
Updated•13 years ago
|
OS: Linux → All
Comment 1•13 years ago
|
||
Comment 2•13 years ago
|
||
Severity: normal → critical
Status: UNCONFIRMED → NEW
Crash Signature: [@ nsHtml5TreeOpStage::MoveSpeculativeLoadsFrom(nsTArray<nsHtml5SpeculativeLoad, nsTArrayDefaultAllocator>&) ]
Component: Untriaged → HTML: Parser
Ever confirmed: true
Keywords: crash,
reproducible
Product: Firefox → Core
QA Contact: untriaged → parser
Summary: Closing a tag and beginning a new one on the same line breaks Firefox's View Source. → Closing a tag and beginning a new one on the same line is crashing in View Source.
![]() |
||
Comment 3•13 years ago
|
||
Henri, can you please take a look? Looks like a null deref...
Comment 4•13 years ago
|
||
The fix is already in mozilla-inbound.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•