If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Status

()

Core
HTML: Parser
P2
major
VERIFIED FIXED
19 years ago
19 years ago

People

(Reporter: buster, Assigned: rickg)

Tracking

Trunk
x86
Windows NT
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

19 years ago
see the minimized test case below.  The <LI> in combination with the missing
</TD> cause a TR to be inserted as a child of the LI.  Frames to get created in
an illegal sequence and this leads to a crash in table frames.  A dump of the
content at the time of the crash follows the test case.

------------ Test case -----------------

<HTML><BODY>
<TABLE BORDER=1>
  <TR>
    <TD>
      <LI>Item 1
      <LI>Item 2
      <LI>Item 3
      <!-- note the missing /td -->

  <tr>
    <td colspan=3>last thing in the table</td>
  </tr>
</TABLE>

</BODY></HTML>


------------ Content Dump --------------
HTML refcount=9<
  HEAD refcount=4<
  BODY refcount=7<
    Text refcount=3<\n>
    TABLE BORDER=1 refcount=5<
      TBODY refcount=4<
        TR refcount=5<
          TD refcount=6<
            Text refcount=3<\n      >
            LI refcount=4<
              Bullet RefCnt=3<>
              Text refcount=3<Item 1\n      >
            LI refcount=3<
              Bullet RefCnt=3<>
              Text refcount=3<Item 2\n      >
            LI refcount=3<
              Bullet RefCnt=3<>
              Text refcount=3<Item 3\n      \n\n  >
              TR refcount=4<
                TD COLSPAN=3 refcount=6<
                  Text refcount=3<last thing in the table>
              Text refcount=3<\n>
      COLGROUP refcount=4<
        COL refcount=4<
(Assignee)

Updated

19 years ago
Status: NEW → ASSIGNED
(Assignee)

Updated

19 years ago
Status: ASSIGNED → RESOLVED
Last Resolved: 19 years ago
Resolution: --- → FIXED
(Assignee)

Comment 1

19 years ago
LI's now correctly autoclose.

Updated

19 years ago
Status: RESOLVED → VERIFIED

Comment 2

19 years ago
above test page URL doesn't crash anymore...
You need to log in before you can comment on or make changes to this bug.