Status

()

Core
XPCOM
3 years ago
3 years ago

People

(Reporter: echo, Unassigned)

Tracking

38 Branch
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

(Reporter)

Description

3 years ago
Created attachment 8627997 [details]
ff3805integerCoruption.html

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.125 Safari/537.36 OPR/30.0.1835.88

Steps to reproduce:

1. run ff3805integerCoruption.html (remotly)


Actual results:

firefox crash 


Expected results:

nothing

Comment 1

3 years ago
Do you have a crash report ID?
Flags: needinfo?(vulnerable.zappa)
This just looks like a safe OOM crash.
Group: core-security
Status: UNCONFIRMED → NEW
Component: Untriaged → XPCOM
Ever confirmed: true
Product: Firefox → Core
Summary: Memory Coruption → OOM crash in NS_NewAtom

Updated

3 years ago
Crash Signature: [ @ operator new(unsigned int) | NS_NewAtom(nsAString_internal const&) ] → [ @ operator new(unsigned int) | NS_NewAtom(nsAString_internal const&) ] [ @ operator new | NS_NewAtom ]
You need to log in before you can comment on or make changes to this bug.