83854 - JavaScript code can enter infinite loop

Status: VERIFIED DUPLICATE of bug 13350

(Core :: DOM: Core & HTML, defect)

Description

[James Green]

I've been experimenting with some JavaScript, and wrote a loop that had the
age-old fatal mistake of not changing (incrementing) it's conditional value.

Running the script had mozilla hing, with 100% CPU. I asked in #mozilla if any
bugs were filed to ensure the JS Engine couldn't get stuck this way, and was
told it already was and that I should file a bug.

I'll attach a testcase as soon as I've taken the fix out of my copy...

Comment 1

[James Green]

Attachment: testcase

Comment 2

[James Green]

OK testcase attached. To reproduce, load it, click on an option in the left
select list, and hit the 'Move Item' button - infinite loop begins.

I don't care if the JS is crap (work in progress! ;)), it shouldn't hang the
browser... Upping to Major on that point.

Comment 3

[Phil Schwartau]

--> DOM  

As I understand it: 

JS Engine provides a branch callback at the bottom of loops.
It's up to the embedding to decide what to do with it - 

Comment 4

[Johnny Stenback (:jst)]

*** This bug has been marked as a duplicate of 13350 ***

Comment 5

[Phil Schwartau]

Marking Verified Duplicate -