Closed Bug 2429 Opened 26 years ago Closed 26 years ago

Crash with <XMP> tag

Categories

(Core :: DOM: HTML Parser, defect, P1)

Product:
Core
Component:
DOM: HTML Parser
Platform:
x86
Windows NT
Type:
defect

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: michael.j.lowe, Assigned: rickg)

Details

This example crashes the parser. Call stack included below. <html> <XMP> This is xmp text. </XMP> </html> NTDLL! 77f76274() nsDebug::PreCondition(char * 0x007323ec, char * 0x00732b30, char * 0x00732b00, int 2271) line 110 + 13 bytes CNavDTD::CloseTopmostContainer() line 2271 + 49 bytes CNavDTD::ReduceContextStackFor(nsHTMLTag eHTMLTag_xmp) line 2428 CNavDTD::HandleDefaultStartToken(CToken * 0x012fa1a0, nsHTMLTag eHTMLTag_xmp, nsIParserNode & {...}) line 754 + 12 bytes CNavDTD::HandleStartToken(CToken * 0x012fa1a0) line 870 + 23 bytes NavDispatchTokenHandler(CToken * 0x012fa1a0, nsIDTD * 0x012fe120) line 261 + 12 bytes CTokenHandler::operator()(CToken * 0x012fa1a0, nsIDTD * 0x012fe120) line 80 + 14 bytes CNavDTD::HandleToken(CNavDTD * const 0x012fe120, CToken * 0x012fa1a0, nsIParser * 0x0133eb10) line 548 + 18 bytes CNavDTD::BuildModel(CNavDTD * const 0x012fe120, nsIParser * 0x0133eb10) line 478 + 20 bytes nsParser::BuildModel() line 717 + 16 bytes nsParser::ResumeParse(nsIDTD * 0x00000000) line 673 + 11 bytes nsParser::OnDataAvailable(nsParser * const 0x0133eb14, nsIURL * 0x0133d2e0, nsIInputStream * 0x0133edb0, unsigned int 49) line 867 + 17 bytes nsDocumentBindInfo::OnDataAvailable(nsDocumentBindInfo * const 0x0133d260, nsIURL * 0x0133d2e0, nsIInputStream * 0x0133edb0, unsigned int 49) line 1682 + 24 bytes OnDataAvailableProxyEvent::HandleEvent(OnDataAvailableProxyEvent * const 0x0133f870) line 624 + 45 bytes StreamListenerProxyEvent::HandlePLEvent(PLEvent * 0x0133f874) line 464 + 12 bytes PL_HandleEvent(PLEvent * 0x0133f874) line 395 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x01217f80) line 357 + 9 bytes _md_EventReceiverProc(void * 0x001e0536, unsigned int 49458, unsigned int 0, long 18972544) line 675 + 9 bytes USER32! 77e71268() 01217f80()
Status: NEW → RESOLVED
Closed: 26 years ago
Resolution: --- → FIXED
Fixed with my last big update.
QA Contact: 4141
Germaine please verify
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.