[Webkit-unassigned] [Bug 6693] Safari hangs then crashes at http://cnx.rice.edu/content/m11268/latest/ (crash in __memcpy)

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=6693





------- Comment #1 from opendarwin.org at mitzpettel.com  2006-01-21 14:13 -------
Created an attachment (id=5819)
 --> (http://bugzilla.opendarwin.org/attachment.cgi?id=5819&action=view)
OffsetHeight test

The given page enters an infinite for loop at
http://cnx.rice.edu/pmathmlcss.js:35
    for ( i = 3; i <= mrowH / (2*opH) ; i += 1)
since opH is zero.
opH comes from taking the offsetHeight of an empty <span>.

FireFox also gives zero for the height of an empty <span>, but doesn't reach
that code at all since it doesn't support accessing DOM nodes as JS variables
by id.

WinIE gives a positive height even for the empty span.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.