Entering a large string into the URL bar causes high memory and a crash
Categories
(Firefox :: Address Bar, defect)
Tracking
()
People
(Reporter: aggbhh4, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0
Steps to reproduce:
I entered a string too big for a string variable to have into the search bar.
Actual results:
Firefox used about 3GB of RAM and eventually crashed.
Expected results:
There should have been a limit to how long of a string can be inputed into the search bar.
also, you can enter the string to any website and if you get lucky enough and it doesnt crash, you can do it on multiple sites and even if the tab is closed, firefox STILL uses the same amount of ram. This means that you can crash entire computers by simply visiting a website!
also, a website just containing a looooong string just crashes with no problems, but if you put that string into a search bar in the website, it doesnt crash and results in a memory leak.
also i tested this in other browsers such as chrome and opera, and it seems firefox is the only vulnerable one.
|
||
Comment 4•3 years ago
|
||
Thanks for the report. This sounds bad, but a user being able to crash their own browser isn't exactly a security issue. There are already lots of ways for web sites to use up too much memory.
|
|
||
Updated•3 years ago
|
|
|
||
Comment 5•3 years ago
|
||
How large of a string, roughly speaking, did you paste into the address bar?
|
||
Comment 6•3 years ago
|
||
The Bugbug bot thinks this bug should belong to the 'Firefox::Address Bar' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
(In reply to Andrew McCreight [:mccr8] from comment #5)
How large of a string, roughly speaking, did you paste into the address bar?
about 256mb
|
||
Comment 8•3 years ago
|
||
Sounds like bug 1589602, we catched some of these cases but there are still a few around
Description
•