JS lack of stack (or heap) overflow control causes Firefox to crash

RESOLVED DUPLICATE of bug 271716

Status

()

Core
JavaScript Engine
--
critical
RESOLVED DUPLICATE of bug 271716
13 years ago
13 years ago

People

(Reporter: Jacek Kolonko, Unassigned)

Tracking

Trunk
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

13 years ago
User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50215; Avalon 6.0.4030; %WAP version%)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5

In the page http://grupa-net.pwr.wroc.pl/jk/ff1.html, stack or heap overflow 
should be detected and not cause the browser to crash!

Reproducible: Always

Steps to Reproduce:
1. Start Firefox
2. Open http://grupa-net.pwr.wroc.pl/jk/ff1.html


Actual Results:  
crash

Expected Results:  
"Stack/heap overflow error" displayed

No module reported during the crash, I believe this bug can have security-
related implications although not discovered yet.
The relevant bit is

<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT> 
Assignee: nobody → general
Component: General → JavaScript Engine
Product: Firefox → Core
QA Contact: general → general
Version: unspecified → Trunk
Dupe of bug 271716 or 271718.

*** This bug has been marked as a duplicate of 271716 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.