Closed Bug 1396448 Opened 7 years ago Closed 7 years ago

window.Notification.requestPermission() firefox hang

Categories

(Firefox :: Site Identity, defect, P2)

55 Branch
defect

Tracking

()

RESOLVED DUPLICATE of bug 1372085
Tracking Status
firefox-esr52 --- ?
firefox55 --- wontfix
firefox56 - wontfix
firefox57 - fix-optional
firefox58 --- affected

People

(Reporter: hef, Unassigned)

Details

(Keywords: csectype-dos, hang)

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:55.0) Gecko/20100101 Firefox/55.0 Build ID: 20170824053838 Steps to reproduce: in javascript: while(true) { window.Notification.requestPermission(); } Will cause firefox to lock up and become unresponsive. Best of all, restarting firefox reloads the page containing the javascript and firefox. I created a repro here: https://hef.github.io/freeze-on-notification-repro/ Be warned, that triggers the bug on page load. You might have to set a response allowing popups. I hit "allow", I'm not sure what happens if you say "not now" or "never" Actual results: Firefox locks up and becomes unresponsive. Expected results: Ideally, firefox would not lock up and eventually prompt the user about an unresponsive script.
Status: UNCONFIRMED → NEW
Component: Untriaged → Site Identity and Permission Panels
Ever confirmed: true
Keywords: csectype-dos
Setting sec-private, but I'm not sure if dos-type bugs need to be. It's pretty bad when sites can DOS us, but I don't expect this to be too hard to fix. Wennie, is there someone who can look into this?
Group: firefox-core-security
Flags: needinfo?(wleung)
(In reply to hef from comment #0) > User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:55.0) > Gecko/20100101 Firefox/55.0 > Build ID: 20170824053838 > > Steps to reproduce: > > in javascript: > > while(true) { > window.Notification.requestPermission(); > } > > Will cause firefox to lock up and become unresponsive. Best of all, > restarting firefox reloads the page containing the javascript and firefox. > > I created a repro here: https://hef.github.io/freeze-on-notification-repro/ > Be warned, that triggers the bug on page load. You might have to set a > response allowing popups. I hit "allow", I'm not sure what happens if you > say "not now" or "never" > > > > Actual results: > > Firefox locks up and becomes unresponsive. > > > Expected results: > > Ideally, firefox would not lock up and eventually prompt the user about an > unresponsive script. I attempted to reproduce this on my local build of m-c on a new profile. Findings: - When I load the testcase page, the page does not finish loading. None of the page's markup is shown, and I get the "stop script" infobar. - Without taking any further action, Firefox is completely fine and usable other than the fact that the testcase page stays indefinitely loading. - Clicking "Wait" on the infobar maintains this situation. - Clicking "Stop it" on the infobar results in Firefox becoming extremely unresponsive, which is strange.
Sorry for not responding earlier, I had the same findings as Nihanth, only that "Stop it" was able to get rid of the page just fine after a few seconds of slowness. Do you have e10s turned on and with how many content processes? (in about:support check Multiprocess Windows and Web Content Processes). If this is specific to non-e10s I think we can safely put it on low priority.
Flags: needinfo?(hef)
Group: firefox-core-security
Keywords: hang
Flags: needinfo?(wleung)
(In reply to Johann Hofmann [:johannh] from comment #3) > Sorry for not responding earlier, I had the same findings as Nihanth, only > that "Stop it" was able to get rid of the page just fine after a few seconds > of slowness. > > Do you have e10s turned on and with how many content processes? (in > about:support check Multiprocess Windows and Web Content Processes). If > this is specific to non-e10s I think we can safely put it on low priority. If I understand correctly, e10s is not in release firefox yet, so I don't think I have that turned on. In Multiprocess Windows I see 0/1 (Disabled by add-ons) I don't see a field for web content processes
Flags: needinfo?(hef)
I don't feel this is worth tracking for release. It's painful, but I also seem to be able to stop the script / close the tab and after a few seconds things go back to normal. hef, e10s has been in release firefox for a while now, although not for all users in particular depending on whether the add-ons they are using are compatible. In 57 old-style add-ons will be disabled which will let us enable e10s for yet more users.
Priority: -- → P2
It seems there's already another bug for this...
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE

It's back. The behavior is a little different but the repro is the same.

firefox 77.0.1 (64-bit) on osx.

Now it doesn't crash or freeze firefox right away. I get prompted to stop a slow page. When I press stop, pages get kind weird, new pages stop loading. Tabs are able to switch but stop responding. Eventually firefox appears to crash anyway.

You need to log in before you can comment on or make changes to this bug.