Netscape 6/7 crashes by a simple stylesheet...

Hi, I'm new here so I don't know if I posted this in the correct list...

I've found out that some simple CSS-code can crash Netscape 6 and 7.

This is a simple html-page containing this code:

<html>
<body>
<div style="position:absolute;">

<div style="position:absolute; overflow:scroll">

</div>
</div>
</body>
</html>

Was this already known?

/Jocke

[jim.r.halfpenny@britishairways.com]

Hi,
I tested this on Mozilla 1.1 on Mandrake 8.2. It doesn't crash, but
Mozilla's CPU usage rises to > 95%. The browser becomes slow but remains
responsive and the offending window/tab can be closed to restore normal
service.

Regards,
Jim Halfpenny




Hi, I'm new here so I don't know if I posted this in the correct list...

I've found out that some simple CSS-code can crash Netscape 6 and 7.

....

[John Wofford]

I have verified this in Mozilla 1.0.1 (Gecko/20020826) on Windows XP Prof.
SP1. The browser stops responding, but can be closed without brute force.

-John

>
>
> Hi, I'm new here so I don't know if I posted this in the correct
> list...

> I've found out that some simple CSS-code can crash Netscape 6 and 7.

> This is a simple html-page containing this code:
>
> <html>
> <body>
> <div style="position:absolute;">
>
> <div style="position:absolute; overflow:scroll">
>
> </div>
> </div>
> </body>
> </html>
>
> Was this already known?
>
> /Jocke

[dwm]

jux@beer.com wrote:
> Hi, I'm new here so I don't know if I posted this in the correct list...
> I've found out that some simple CSS-code can crash Netscape 6 and 7.
> This is a simple html-page containing this code:

while we're on the subject...just this week I reported to Netscape that this simple
invalid (?) use of regex in "split" can also crash 7.x on windows.
Woopdidoo.

Tested:
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02

<html>
<head>
<title>test</title>
<--script-- language="JavaScript">
function reformatDate(someDate) {
var tokens = someDate.split(/(\/|-)/);
if (tokens[1].length == 1) tokens[1] = "0" + tokens[1];
if (tokens[0].length == 1) tokens[0] = "0" + tokens[0];
var result = tokens[2] + tokens[1] + tokens[0];
alert(result);
//return result;
}
</--script-->
</head>
<body>
<form action="" method="GET" name="form1" onSubmit="return reformatDate(this.dt.value);">
MM/DD/YYYY - <input type=text name=dt>
<input type=submit>
</form>
</body>
</html>

[Raj Mathur]

>>>>> "Jocke" == jux <jux@beer.com> writes:

Jocke> Hi, I'm new here so I don't know if I posted this in the
Jocke> correct list...

Jocke> I've found out that some simple CSS-code can crash Netscape
Jocke> 6 and 7.

Jocke> This is a simple html-page containing this code:

Jocke> <html> <body> <div style="position:absolute;">

Jocke> <div style="position:absolute; overflow:scroll">

Jocke> </div> </div> </body> </html>

Jocke> Was this already known?

Tested on following browsers on Red Hat Linux 8.0, i386:

galeon-1.2.6-0.8.0: Consumes 100% CPU but continues to respond to
events.

kdebase-3.0.3-14 (Konqueror): No effect

mozilla-1.0.1-26: Consumes 100% CPU, stops responding to events (or
takes overly long to respond -- I didn't wait more than a couple of
minutes).

netscape-communicator-4.79-1: No effect.

Regards,

-- Raju

Jocke> /Jocke

--
Raj Mathur raju@kandalaya.org http://kandalaya.org/
It is the mind that moves

[Peter Lindgren]

Hej!

On Tue, 25 Feb 2003 14:53:17 -0600 (CST), "John Wofford" <jwofford@mail.mst=
e.uiuc.edu> wrote:
> I have verified this in Mozilla 1.0.1 (Gecko/20020826) on Windows XP Prof.
> SP1. The browser stops responding, but can be closed without brute force.

Tested on Mozilla 1.2.1 on Windows 2000 SP3. Cannot repeat stated problem,
Mozilla continues to work.
(Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2.1) Gecko/20021130)

/Peter
--=20
Peter Lindgren, Dataingenj=F6r 0921 - 573 30
VD Tidsredovisning i Boden AB 0703 - 39 39 40
Hur tidsredovisar du den h=E4r veckan? http://www.tidsredovisning.se
- =C5sikterna ovan, uttryckta eller underf=F6rst=E5dda, =E4r personliga -

[Greg Steuck]

Yes, it had been known for a while. Searching for "style overflow
scroll" in bugzilla brings up a list of bug reports.

So, instead of posting to bugtraq you could have added a note to one of
those bug reports. Then again, posting here might put some pressure on
mozilla developers, who knows?

>>>>> "jux" == jux <jux@beer.com> writes:

jux> I've found out that some simple CSS-code can crash Netscape 6
jux> and 7.

jux> This is a simple html-page containing this code:

jux> <html> <body> <div style="position:absolute;">
jux> <div style="position:absolute; overflow:scroll">
jux> </div> </div> </body> </html>

jux> Was this already known?

[Frankie]

This looks like http://bugzilla.mozilla.org/show_bug.cgi?id=189118

Tested Jocke's page on Mozilla for MacOS X. Worked fine, no effect.
The top command said Mozilla was using under 2% of my CPU.

Jocke wrote:
>> <html>
>> <body>
>> <div style="position:absolute;">
>>
>> <div style="position:absolute; overflow:scroll">
>>
>> </div>
>> </div>
>> </body>
>> </html>

--
Francis Uy, Web Coordinator http://cty.jhu.edu/cde/ 410-516-0162