87638 - img height=128+0+0 does weird things

Status: VERIFIED DUPLICATE of bug 54142

(Core :: DOM: HTML Parser, defect)

Description

[m2]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.1+) Gecko/20010625
BuildID:    2001062504

A tag <img height=128+0+0 ...> produces an image several thousand pixels tall. 
The parser is parsing 128+0+0 as a valid number.  Other browsers seem to stop at
the first +.  This is a problem in the scripts that generate the mentioned website. 

Reproducible: Always
Steps to Reproduce:
Open http://wwwvis.informatik.uni-stuttgart.de/


Actual Results:  I get the top image scaled to several thousand pixels high.

Expected Results:  Ignore everything after the +?  Or just ignore the buggy img
heigh info.

Comment 1

[Aaron Kaluszka]

Actually, seems to work alright on Win2K.. must be yet another Linux img scaling
issue..

Comment 2

[Boris Zbarsky [:bzbarsky]]

The page has been fixed.  This is a bug on all platforms...

Duplicate of "+ within integer attribute is stripped, should signal end of number"


*** This bug has been marked as a duplicate of 54142 ***

Comment 3

[Xan Lopez]

Duplicate Verified. This is a duplicate of bug 54142:
"http://www.flightgear.org/Gallery/ has a few images with height=128+0+0.  
Mozilla interprets this as height="12800"."