Closed Bug 293011 Opened 19 years ago Closed 19 years ago

Dos condition exist when a large number is passed to both the colSpan and rowspan in the <td> section

Categories

(Core :: Layout: Tables, defect)

Product:
Core
Component:
Layout: Tables
Version:
1.7 Branch
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 141818

People

(Reporter: ri0t, Unassigned)

References

(
URL
)

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

when defining the colspan and rowspan of a table cell it is possible to cause
the browser to consume all system resources both cpu and memory.

Reproducible: Always

Steps to Reproduce:
1.open http://www.ri0tnet.net/hidden.htm
2.
3.

Actual Results:  
proccessor goes to 100% and memory starts to climb eventualy consuming all
system resources

Expected Results:  
limit the amount of colspan and rowspan 

filed as critical cause the software and system does hang and per your
definitions  it qualified but i dont think its that big of a bug.
Component: Security → Layout: Tables
Product: Firefox → Core
QA Contact: firefox → layout.tables
Version: unspecified → 1.7 Branch

*** This bug has been marked as a duplicate of 141818 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Whiteboard: DUPEME
You need to log in before you can comment on or make changes to this bug.