314574 - Oversized images can crash operating system

Status: RESOLVED DUPLICATE of bug 289864

(Core Graveyard :: Image: Painting, defect)

Description

[HyperHacker]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

When viewing a page with an extremely stretched image (in this case, an animated GIF image ~150px wide stretched to ~20,000px wide), the entire image is rendered, crashing the video drivers and hence the entire operating system.

Reproducible: Didn't try

Steps to Reproduce:
1. Take a small (~150x50) image, and place it in a page.
2. Set the image's width or height attribute (in the img tag) to a very high number (~20000).
Actual Results:  
Windows crashes attempting to render the image. The error message will vary depending on your video card and drivers.

Expected Results:  
Firefox should only attempt to render the visible portion of the image or not render it at all.

System specs:
OS: Windows XP Pro SP2
CPU: AMD Sempron 2800+, Socket 754 @ 1.7ghz
Motherboard: MSI K8T Neo-V with onboard sound/LAN
RAM: 256MB PC2700 333mhz x1
Video: 128MB Chaintech Volari V3 XGI

Note that because this is mainly the fault of poor memory management by the OS, it may apply to other OSes/platforms as well.

Comment 1

[shutdown]

*** This bug has been marked as a duplicate of 289864 ***