1059355 - Crash of browser (Download Loop)

Status: RESOLVED DUPLICATE of bug 900115

(Core :: JavaScript Engine, defect)

Description

[Mischa R. van Geelen]

Attachment: HTML-code

VULNERABILITY DETAILS
Forced downloads are not checked for amount of files at all, for example with an loop and timeout, instant crashing of Firefox is possible.

REPRODUCE STEPS:
1. ) User nagivates to URL (http://geexlabs.eu/flow/loop.php)
2. ) Javascripts loops an 5MB download with one millisecond timeout
3. ) Magic happens

Comment 1

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

I can't seem to repro this, I am getting a hung browser but not a crash. If you have submitted a crash report can you please give us a link to that from about:crashes?

Comment 2

[Mischa R. van Geelen]

The crash was on Android, my bad.
Also next time when i try i will submit a report.

Thanks,

Rick

Comment 3

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

Which version of android?

Comment 4

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

No repro
Galazy Nexus Fx 31 on Android 4.3

Comment 5

[Mischa R. van Geelen]

With Firefox version? Also frozen here on LG G Flex 4.4 with Firefox

Comment 6

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

I tried Firefox 31 on an android device, it did not freeze or crash. So unless we can generate a crash report to look at and work on this bug is going to have be resolved>works for me

Comment 7

[Mischa R. van Geelen]

Here is the stack-trace for Firefox 31 on Mac OS X 10.9.4, it is crashing on Javascript, not even on downloading files. It is really important to fix this.
Crash report:
https://crash-stats.mozilla.com/report/index/8f99a2bb-0984-44f6-a4e0-96b032140827

Comment 9

[Mischa R. van Geelen]

It is not fixed, so why is my report duplicate if report 900115 (https://bugzilla.mozilla.org/show_bug.cgi?id=900115) does not even have an Proof-of-concept?