300461 - PC crashed when viewed url given by ICQ

Status: VERIFIED DUPLICATE of bug 289864

(Firefox :: General, defect)

Description

[Tomas Landovsky]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; cs-CZ; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; cs-CZ; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

The website http://www.heppel-stefan.de/index.htm contains the code below.
Computer (the whole system) crashes when FireFox opens the document and tries to
execute the code below.

I tried 2 times > the computer crashed 2 times.

This is the code:

Yes, its easy to reboot <b>your</b> System ;)<p>restarting now................ 
:D</p>
<p>mfg
<img src="pic.png" width="9999999" height="9999999" alt="puh" /></p>


Reproducible: Always

Steps to Reproduce:
1. open the website http://www.heppel-stefan.de
2.
3.

Actual Results:  
blue windows Xp screen (blue death)

Expected Results:  
not crash

Comment 1

[William Bumgarner [:zsinj]]

Yes, you computer could get confused if it tried to allocate enough memory to
view a 10mil x 10mil pixel .png image.

User error on the programmer's part.

<- INVALID?

Comment 2

[William Bumgarner [:zsinj]]

Actually re-reading comment 0, marking this INVALID due to malicious site code.
Contact the webmaster, or refrain from visiting the website (hence intentionally
crashing your computer).

<- INVALID

Comment 3

[Tomas Landovsky]

(In reply to comment #1)
> Yes, you computer could get confused if it tried to allocate enough memory to
> view a 10mil x 10mil pixel .png image.
> 
> User error on the programmer's part.
> 
> <- INVALID?

Ok. But clearly, the program should know that such attempt will crash the
computer and stop the code from execution so the computer does not crash at the
end. It is not error on programmer's side but RATHER an intention - that being
the reason for me to submitt it as a bug.

Comment 4

[William Bumgarner [:zsinj]]

Core needs to limit the height/width limits for <img> tag, you're saying? I'll
reopen this and see if anyone is willing to work on it.

Comment 5

[Mike Connor [:mconnor]]

This is a dupe.

Comment 6

[William Bumgarner [:zsinj]]

Found the dupe!

*** This bug has been marked as a duplicate of 289864 ***