Bug 6908 – REGRESSION: Replacing existing <option> shuffles it to the end of the list

• Component: Forms
• Status: VERIFIED FIXED

Go to www.qantas.com.au.
In the tab labelled "Domestic" choose a Month to depart from (choose March, for example).
Once you release the mouse button from choosing that month, notice that the month displayed is not what you selected.
Attempt to select another month from the same popup menu and notice that the order of items in the list is now very strange.

This does not occur with Apple's latest release of Safari.

[Joost de Valk (AlthA)]

Confirmed, this site is good for bugfinding. :)

[David Kilzer (:ddkilzer)]

Adding Regression keyword per reporter.  Regressions are P1.  Bug 6870 had to be fixed before this could be tested, therefore adding it as a dependency.

[Alexey Proskuryakov]

Created attachment 6070 [details]
test case

Safari 2.0.3 and Opera leave the first element selected; WinIE and Firefox select the second one. ToT replaces a wrong (third) element).

[David Kilzer (:ddkilzer)]

Actually ToT removes the element in the list then adds the new element to the end of the list.  It should simply replace the existing element in the list with the new element.

[Darin Adler]

The problem is caused by the fact that KJS::HTMLSelectCollection::put relies on the "options" collection, which is not implemented. In fact, the binding for "options" calls optionsHTMLCollection() instead of options().

This particular bug can almost certainly be fixed just by changing the function call inside KJS::HTMLSelectCollection::put from options() to optionsHTMLCollection(). I tried it and it seems to work.

[Darin Adler]

Created attachment 6262 [details]
patch to fix the problem, including change log and test

[David Kilzer (:ddkilzer)]

Verified fixed.