76870 - crash on appending element in the event handler of a mutation event

Status: VERIFIED DUPLICATE of bug 77271

(Core :: DOM: Events, defect)

Description

[Vladimir Ermakov]

If you have a DOMNodeInserted event listener that calls appendChild Netscape 6 
crashes. I thought this might be because there is an infinite loop and event 
handler is calling itself, and maybe it is so, but I did add a flag to check 
whether the event has been called or not, and it is still crashing. 
 To reproduce open the attached testcase and click the button. Watch it crash.

Comment 1

[Vladimir Ermakov]

Attachment: Testcase

Comment 2

[joki (gone)]

Cool.  Looks pretty infinite loopy to me from the stack trace.  More fun for 
hyatt.

Comment 3

[Alex Vincent [:WeirdAl]]

Looking at the source code to the attachment, I feel very strongly this bug is a
duplicate of bug 77271, which covers a broader scope but essentially the same
issue imho.

However, after a quick discussion in #bugweek, I've decided to take a safer
route and mark this bug dependent on 77271.  Opinions welcome.

Comment 4

[Vladimir Ermakov]

Oh yeah of course, except this was created before :)

*** This bug has been marked as a duplicate of 77271 ***

Comment 5

[Vladimir Ermakov]

verifying