76845 - crash when form inside table is submitted with javascript

Status: VERIFIED DUPLICATE of bug 76694

(Core :: Layout: Form Controls, defect)

Description

[Conor Lennon]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux 2.2.14-5.0 i686; en-US; rv:0.8.1+)
Gecko/20010419
BuildID:    2001041921

In a form inside a table, when the onSubmit value is set to
"document.logonform.submit();return false;" mozilla crashes when the form is
submitted.
I'm going to attach html as a testcase.

Reproducible: Always
Steps to Reproduce:
1.Click on the Submit button

Actual Results:  Mozilla crashes

Expected Results:  The form should be submitted and mozilla shouldn't crash

Comment 1

[Conor Lennon]

Attachment: testcase that produces a crash when the form is submitted

Comment 2

[Conor Lennon]

I'm also seeing this in Build 2001041620 in WinNT.
IncidentId TB29373869W was generated by this Bug on WinNT.

Comment 3

[Boris Zbarsky [:bzbarsky]]

the table is irrelevant.  The problem is calling submit() in the onsubmit handler 
-- we get into an infinite loop.

Bug this is a dup of has a patch.


*** This bug has been marked as a duplicate of 76694 ***

Comment 4

[Vladimir Ermakov]

verifying