Closed
Bug 272296
Opened 20 years ago
Closed 20 years ago
nested array sort() loop Stack overflow exception = crash and burn
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
DUPLICATE
of bug 271716
People
(Reporter: bugzilla, Unassigned)
References
()
Details
(Keywords: crash)
Attachments
(1 file)
|
175 bytes,
text/html
|
Details |
from: http://www.edup.tudelft.nl/~bjwever/advisory_firefox_flaws.html and http://www.securityfocus.com/archive/1/382262 <HTML> <SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT> <SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT> </HTML>
|
Reporter | |
Updated•20 years ago
|
Severity: normal → critical
|
|
Reporter | |
Updated•20 years ago
|
Summary: nested array sort() loop Stack overflow exceptio → nested array sort() loop Stack overflow exception = crash and burn
|
|
Reporter | |
Comment 1•20 years ago
|
||
This will CRASH your browser!
|
||
Comment 2•20 years ago
|
||
see bug 271716 and bug 203278
|
||
Comment 3•20 years ago
|
||
Stop filing dups, please -- check first with bugzilla, it can help you find 'em. Without more data about stack signature, I'm going to dup against the likeliest target, bug 271716. /be *** This bug has been marked as a duplicate of 271716 ***
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•