300715 - JS lack of stack (or heap) overflow control causes Firefox to crash

Status: RESOLVED DUPLICATE of bug 271716

(Core :: JavaScript Engine, defect)

Description

[Jacek Kolonko]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50215; Avalon 6.0.4030; %WAP version%)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5

In the page http://grupa-net.pwr.wroc.pl/jk/ff1.html, stack or heap overflow 
should be detected and not cause the browser to crash!

Reproducible: Always

Steps to Reproduce:
1. Start Firefox
2. Open http://grupa-net.pwr.wroc.pl/jk/ff1.html


Actual Results:  
crash

Expected Results:  
"Stack/heap overflow error" displayed

No module reported during the crash, I believe this bug can have security-
related implications although not discovered yet.

Comment 1

[Daniel Veditz [:dveditz]]

The relevant bit is

<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT> 

Comment 2

[Daniel Veditz [:dveditz]]

Dupe of bug 271716 or 271718.

*** This bug has been marked as a duplicate of 271716 ***