Closed Bug 287303 Opened 20 years ago Closed 19 years ago

Recursive XBL-binding causes browser to crash

Categories

(Core :: XBL, defect)

Product:
Core
Component:
XBL
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 55070

People

(Reporter: fatbull, Unassigned)

Details

Attachments

(2 files)

Example binding
274 bytes, application/xml
Details
Example testcase
226 bytes, text/html
Details 
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050319
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050319

If a binding creates anonymous content, other bindings may be attached to the
new content. It is therefore possible to create an endless loop which causes the
browser to crash.
The attached testcase shows this behavior. Note that I limited the recursion to
5 levels in this example, so you can safely open the file.


Reproducible: Always

Steps to Reproduce:
Attached file Example binding — 

    
    

    
  

      
      
      
      

        Attached file
          
        Example testcase
        — 
      

    


  

    
    

    
  
We have a bug on this already....
Whiteboard: DUPEME

    
    

    
  

*** This bug has been marked as a duplicate of 55070 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Whiteboard: DUPEME

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: