Closed Bug 31326 Opened 24 years ago Closed 24 years ago

If unlimited frames are displayed Mozilla may crash

Categories

(Core :: Layout: Images, Video, and HTML Frames, defect, P3)

x86
Windows 98
defect

Tracking

()

VERIFIED DUPLICATE of bug 8065

People

(Reporter: e9826090, Assigned: pollmann)

References

()

Details

Unlimited frames are displayed, until the system memory is "filled with frames"
and no memory is left.


Possible effects of the bug:

- Mozilla crashes
- It's not possible to start further programmes, because there is no system
memory left
- The OS crashes


Tested on other browsers:

- Netscape Communicator 4.72 is ok
- IE 5.5 (preview) is ok


Tested on:

Win98 SE
128 MB RAM
Mozilla build ID: 2000030913


The code:

Download as zip file
http://stud3.tuwien.ac.at/~e9826090/mozilla/unlimited-frames/unlimited-frames.zip

Here is the HTML code:

<!--

-----------------

filename: unlimited-frames1.html

<html>
<head>
<title></title>
</head>
<frameset rows="50%,50%">
<frame src="unlimited-frames-2.html">
<frame src="unlimited-frames-2.html">
</frameset>
<body></body>
</html>

-----------------

filename: unlimited-frames2.html

<html>
<head>
<title></title>
</head>
<frameset rows="50%,50%">
<frame src="unlimited-frames-1.html">
<frame src="unlimited-frames-1.html">
</frameset>
<body></body>
</html>

-----------------

//-->

eof
I got up to 410 webshells and didnt crash on Linux build 2000.03.09.13.  But
maybe there should be some safeguards, or maximum number of frames. Marking NEW
Status: UNCONFIRMED → NEW
Ever confirmed: true
Why would you intentionally try to crash the browser?  ;)

This bug is already reported as bug 8065.  Thanks!

*** This bug has been marked as a duplicate of 8065 ***
Status: NEW → RESOLVED
Closed: 24 years ago
Resolution: --- → DUPLICATE
Zach, that is good information - what do you think a good limit is?  Around
200?  100?  I eventually want to fix bug 8065 by putting a limit on the depth of
nesting.  I think 100 would allow almost all useful websites to be displayed
fully but prevent crashes like this.
I tried to crash the browser because I think that the stability of the programme
is very important. For sure no webdesigner would create HTML code to crash the
browser ? however think of all the ?script kiddies? and ?cyber vandals? who
could put this code on their pages on purpose. Furthermore the code could be
included in cracked websites. Finally I don?t like the idea that there is a bug
which may result in the crash of Mozilla but at the same time M$ IE can handle
it. That?s my opinion?   ;)
Marking verified dup of 8065.
Status: RESOLVED → VERIFIED
Product: Core → Core Graveyard
Component: Layout: HTML Frames → Layout: Images
Product: Core Graveyard → Core
You need to log in before you can comment on or make changes to this bug.