Closed Bug 3522 Opened 26 years ago Closed 26 years ago

Crash at this page, parsing illegal frameset html

Categories

(Core :: DOM: HTML Parser, defect, P1)

Product:
Core
Component:
DOM: HTML Parser
Platform:
All
Mac System 8.5
Type:
defect

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: glynn, Assigned: karnaze)

References

(
URL
)

Details

March 8 Gecko builds, Mac win32, Linux 1. Launch app, try to go to: mondial.net.au - throbber activity but no user viewable page layout is seen and you crash. • Crash - Mac PPC access exception at NSGetFactory, win98 illegal op at RAPTORHTML.DLL, Linux manifests as error executing viewer and quits to cmd line. Marked critical as this blocks verification of another bug using same page. 4.51 renders the page without crashing. Stripped mondial.et.au source page down, corrected html errors until repro narrowed to find that the missing row data causes the crash; parser cannot deal with not having proper # of rows/data matched up. If you delete a <frame row> or add the needed row parameter *,* then the page is displayed properly. Test Case follows that will crash: <html> <frameset cols="141,*"> <frameset rows="*"> <frame src="left.html"> <frame src="main.html"> </frameset> </frameset> </html>
oh, was running viewer optimized, and removing janc from cc as she is qa contact
Status: NEW → ASSIGNED
Assignee: rickg → karnaze
Status: ASSIGNED → NEW
This bug is in the content sink. It's either Kipps or (more likely) ChrisK's. I'm wondering how this got to be assigned a parser bug in the first place.
Status: NEW → ASSIGNED
<note that this didn't crash the 3.24.99 optimized Win32 build, running on Win NT 4 SP3.>
Status: ASSIGNED → RESOLVED
Closed: 26 years ago
Resolution: --- → FIXED
Fixed with latest checkin.
QA Contact: 3847 → 4141
verified using the 1999042608 build
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.