296061 - Image resize in HTML crashes the browser

Status: RESOLVED WORKSFORME

(Core :: Graphics: ImageLib, defect)

Description

[Andrea Musuruane]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; it-IT; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; it-IT; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

The page at http://www.jgiannotti.com/pwned/crash.html contains the following
HTML code:

<HTML>
  <BODY>
    <IMG SRC="./imagecrash.jpg" width="9999999" height="9999999">
  </BODY>
</HTML>

If you load the page with Firefox it crashes the browser and Windows.

Please note that some idiot is spreading the above URL. For an example, please see:

http://www.thottbot.com/index.cgi?i=40103


Reproducible: Always

Steps to Reproduce:
1. Open http://www.jgiannotti.com/pwned/crash.html
2. The page loads
3. Firefox crashes
4. Windows crashes

Actual Results:  
Firefox and Windows crash.

Expected Results:  
Firefox shouldn't crash.

Comment 1

[Hermann Schwab]

wfm Mozilla/5.0 (Windows; U; Win98; de-DE; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

I remember having seen the image before, maybe in a bug, less likely in the forums. 

I don´t see an image, only a huge white background with long scrollbars.
Screen resolution is 800x600, right-click 'View Image' gives me a resizable
image of 640x480

View source gives:
<HTML>
  <BODY>
    <IMG SRC="./imagecrash.jpg" width="9999999" height="9999999">
  </BODY>
</HTML>

DOM Inspector: 
BODY box width:      768      box height 10000000
IMG  box width: 10000000      box height 10000000

Comment 2

[Steve England [:stevee]]

Test URL hangs firefox for me for about a minute -- Mozilla/5.0 (Windows; U;
Windows NT 5.0; en-US; rv:1.7.8) Gecko/20050509 Firefox/1.0.4

Test URL works fine for me with Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
rv:1.8b2) Gecko/20050531 Firefox/1.0+ ID:2005053112

Resolved WFM?

Comment 3

[Andrea Musuruane]

Retested with "Mozilla/5.0 (Windows; U; Windows NT 5.0; it-IT; rv:1.8b2)
Gecko/20050531 Firefox/1.0+" and it works fine. Firefox doesn't crash.