IE6 crash bug (small code sample)

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

The following valid code sample reliably crashes IE6 on various platforms (I
tried XPSP1, XPSP2, 2000). Is there a more appropriate place to report it
(besides the "Send Error Report" popup) to improve the chances of it getting
fixed?

I did some additional testing and I believe the true culprit might be the
creation and insertion of the new TBODY element. I think the rest is
necessary mainly to make the mess bigger so that IE eventually crashes.

Uli


<HTML>
<HEAD>
<SCRIPT type="text/JavaScript">
function initall() {
var tableElem = document.body.firstChild;
if(tableElem.childNodes.length > 0) {
tableElem.removeChild(tableElem.firstChild);
}

var targetBody = document.createElement('TBODY');
tableElem.appendChild(targetBody);

var sampleRow = document.createElement('TR');
var cell = document.createElement('TD');
for(var i = 0; i < 8; i++) {
sampleRow.appendChild(cell.cloneNode());
}
targetBody.appendChild(sampleRow);

setTimeout(initall, 1);
};
</SCRIPT>
</HEAD>
<BODY onload="initall();">
<TABLE><TBODY></TBODY></TABLE>
</BODY>
</HTML>
 
After some additional analysis I believe that the cause for the crash is the
removal of the table's last TBODY and reinsertion of a new TBODY. That seems
to corrupt things somehow. Nothing illegal about it, though.

By the way, this same bug can make Microsoft's tabular data control crash
when resetting and reloading table data.

Any MS plans to fix this?

Uli
 
Back
Top