Closed
Bug 272296
Opened 21 years ago
Closed 21 years ago
nested array sort() loop Stack overflow exception = crash and burn
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
DUPLICATE
of bug 271716
People
(Reporter: bugzilla, Unassigned)
References
()
Details
(Keywords: crash)
Attachments
(1 file)
|
175 bytes,
text/html
|
Details |
from:
http://www.edup.tudelft.nl/~bjwever/advisory_firefox_flaws.html
and
http://www.securityfocus.com/archive/1/382262
<HTML>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>
|
Reporter | |
Updated•21 years ago
|
Severity: normal → critical
|
|
Reporter | |
Updated•21 years ago
|
Summary: nested array sort() loop Stack overflow exceptio → nested array sort() loop Stack overflow exception = crash and burn
|
|
Reporter | |
Comment 1•21 years ago
|
||
This will CRASH your browser!
|
||
Comment 2•21 years ago
|
||
see bug 271716 and bug 203278
|
||
Comment 3•21 years ago
|
||
Stop filing dups, please -- check first with bugzilla, it can help you find 'em.
Without more data about stack signature, I'm going to dup against the likeliest
target, bug 271716.
/be
*** This bug has been marked as a duplicate of 271716 ***
Status: NEW → RESOLVED
Closed: 21 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•