Closed Bug 366751 Opened 18 years ago Closed 18 years ago

Crash occurs when using multiple <embed> tags with PDF documents

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Version:
1.8 Branch
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 325588

People

(Reporter: ailiminator, Unassigned)

Details

(Keywords: crash)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1 A stack overflow occurs when attempting to render an HTML document with multiple (at least two) <embed> tags with PDF documents as their src. This appears to be caused by a recursive/infinite loop that exhausts all stack memory. Reproducible: Always Steps to Reproduce: 1. Attempt to render the following page: <html> <embed src="/ka.pdf"></embed> <embed src="/boom.pdf"></embed> </html> Actual Results: Stack overflow resulting in a crash of FF. Expected Results: The correct rendering of multiple PDFs in <embed> tags. The culprit is probably a combination of FF and nppdf32.dll as this problem does not occur with the newest version of the Adobe Reader plugin (8.0). I have tested this issue on Windows XP Professional (64-bit edition) and Windows 2000 Professional, with multiple versions of FF (since pre-1.5, I believe) and possibly multiple versions of Adobe Reader, but at least version 7.0+. This is a memory exhaustion condition, and not a memory corruption condition, so I do not believe it is exploitable (but I could be wrong).
Component: General → Plug-ins
Product: Firefox → Core
QA Contact: general → plugins
Version: unspecified → 1.8 Branch
Keywords: crash
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.