16757 2012-04-17 07:58:38 +0000 Should cellIndex return -1 if the cell has no parent tr? 2013-08-15 00:33:32 +0000 1 1 1 Unclassified WHATWG HTML unspecified Other other RESOLVED FIXED http://www.whatwg.org/specs/web-apps/current-work/#attributes-common-to-td-and-th-elements P3 normal Unsorted 1 contributor ian ian mike Ms2ger yuhongbao_386 contributor oldest_to_newest 66758 0 contributor 2012-04-17 07:58:38 +0000 Specification: http://www.whatwg.org/specs/web-apps/current-work/multipage/tabular-data.html Multipage: http://www.whatwg.org/C#attributes-common-to-td-and-th-elements Complete: http://www.whatwg.org/c#attributes-common-to-td-and-th-elements Comment: Should cellIndex return -1 if the cell has no parent tr? Posted from: 91.181.34.103 by ms2ger@gmail.com User agent: Mozilla/5.0 (X11; Linux x86_64; rv:12.0a1) Gecko/20120108 Firefox/12.0a1 66759 1 Ms2ger 2012-04-17 07:58:52 +0000 See <https://bugzilla.mozilla.org/show_bug.cgi?id=746077> 66760 2 Ms2ger 2012-04-17 08:01:38 +0000 In particular, it seems strange that 0 can mean both "first cell" and "cell in the wrong place". -1 is more common for indexOf-style APIs, IME. 70704 3 contributor 2012-07-18 17:20:27 +0000 This bug was cloned to create bug 18118 as part of operation convergence. 71181 4 ian 2012-07-19 23:00:33 +0000 What do browsers do? 71253 5 Ms2ger 2012-07-20 10:50:55 +0000 <http://software.hixie.ch/utilities/js/live-dom-viewer/?saved=1673> Gecko: -1 Chrome: 0 Opera: undefined (but does support the attribute for cells with a parent tr) IE: semi-random numbers 71262 6 ian 2012-07-20 16:59:52 +0000 jeez. Ok, I'll look into making it -1. 72057 7 contributor 2012-08-10 19:49:50 +0000 Checked in as WHATWG revision r7243. Check-in comment: All the browsers disagree, so we'll reward the one that makes the most sense. Today's winner: Firefox! http://html5.org/tools/web-apps-tracker?from=7242&to=7243 72058 8 Ms2ger 2012-08-10 20:05:30 +0000 Filed DSK-371875, <https://bugs.webkit.org/show_bug.cgi?id=93738>. 72077 9 Ms2ger 2012-08-11 18:02:17 +0000 And a test: http://dvcs.w3.org/hg/html/diff/3956549d084d/tests/submission/Ms2ger/the-elements-of-html/tabular-data/attributes-common-to-td-and-th-elements/cellIndex.html 84697 10 yuhongbao_386 2013-03-20 00:29:38 +0000 (In reply to comment #5) > IE: semi-random numbers Playing around with WinDbg, these "semi-random numbers" seems to be addresses. This can probably be used as an address leak to defeat ASLR in IE9. IE10 fixed this and matches the spec. 84698 11 yuhongbao_386 2013-03-20 00:38:23 +0000 This information leak is due to MSHTML!CTableCell::get_cellIndex not writing the address provided for the return value that is passed as part of COM calling conventions, which is a stack local variable that happens to be set to the address when the function was called. 84699 12 yuhongbao_386 2013-03-20 00:40:02 +0000 *the address of the object that is passed in the first parameter 90626 13 yuhongbao_386 2013-07-11 01:55:23 +0000 Fixed in the July Cumulative Update, it now returns -1. 92074 14 yuhongbao_386 2013-08-15 00:33:32 +0000 For IE9.