[Webkit-unassigned] [Bug 7137] New: Crash if <table> is removed from DOM while being parsed if it contains bogus content

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=7137

           Summary: Crash if <table> is removed from DOM while being parsed
                    if it contains bogus content
           Product: WebKit
           Version: 420+ (nightly)
          Platform: PC
               URL: http://www.hixie.ch/tests/adhoc/html/parsing/error-
                    handling/034.html
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Tables
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ian at hixie.ch


STEPS TO REPRODUCE
   1. <table>
   2. Remove the table from the DOM.
   3. <div>
     (bogus element in this context, parser tries to move it outside the table)

ACTUAL RESULTS
   Crash.

EXPECTED RESULTS
   Content should be placed where the table used to be in the DOM. I'm not yet 
   sure exactly what this means if other content is moved around in the DOM. I 
   think if the <table> is no longer inside its original parent, then it should
   just append the bogus content to the parent.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.