Open Bug 360877 Opened 18 years ago Updated 2 years ago

many uses of mouseover event showing alert results in too much recursion

Categories

(Core :: DOM: UI Events & Focus Handling, defect)

PowerPC
macOS
defect

Tracking

()

UNCONFIRMED

People

(Reporter: petermichaux, Unassigned)

Details

(Keywords: testcase)

Attachments

(3 files)

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8

In the following example I create a simple div with a mouseover event. When the alert appears I can rarely select "OK" by pressing enter on the keyboard. That is one strange thing.

The big problem is that if I repeat this experiment many times (5 to 40) without refreshing the page I eventually see a "too much recursion" error in Firebug and Firefox freezes. Yes this is a tedious test but this is a bug. Other browsers don't do this. 

I have to kill the process to quit Firefox.

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">

<html lang="en">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
	<title>Firefox Bug</title>
  
</head>
<body>

  <div id="blue" style="margin-top:11em;background:cornflowerblue;">mouse over me many times to see an alert and after a while a "too much recursion" error in firefox.</div>
  <script type="text/javascript">
    document.getElementById("blue").onmouseover = function(){alert("hi")};
  </script>

</body>
</html>


Reproducible: Always

Steps to Reproduce:
1.Mouseover the div many times. Eventually there will be a too much recursion error.
2.
3.

Actual Results:  
too much recursion error

Expected Results:  
an endless series of alerts as I mouseover the div
Assignee: nobody → events
Component: General → Event Handling
Keywords: testcase
Product: Firefox → Core
QA Contact: general → ian
Version: unspecified → Trunk
Assignee: events → nobody
QA Contact: ian → events
Component: Event Handling → User events and focus handling

I came from bug 1667962
(I noticed a strange "too much recursion" error and looking for similar bug reports to figure out what is going on.
I now have a suspicion something is amiss with alert-like error reporting in JS code.)
I am using FF 87.0 windows 10 64-bit as I write this.

Every time I place mouse over the said area in the sample page (actually, just viewing the attachments here triggers
JS execution.): this is a source of potential DoS in a sense. :-)
Quite natural behavior for a bug reporting system, but we may not want that happen because there can be
malicious code reported unintentionally.

Anyway, when I hover mouse on the area mentioned in the attachments,
I get a dialog that says "hi" the first time, but on the subsequent try, I get a different dialog
that also mentions if the additional/subsequent dialog should be suppressed.
So DoS is avoided in modern FF I think instead of getting the following behavior (which is indeed used by malicious website from what I understand.)

Expected Results:  
an endless series of alerts as I mouseover the div
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: