612170 - javascript makes firefox freeze

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Jonian Dervishi]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.44 Safari/534.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12

Firefox crashes when i execute a javascript at the address bar. 
-----
javascript:while(1<2){var g; window.open("http://mozilla.org",g,"menubar=no,width=1,height=1,toolbar=no"); g=g+1;}
-----
Even if this alert pops up: 
"A script on this page may be busy, or it may have stopped responding. You can stop the script now, or you can continue to see if the script will complete." and i click Stop Script it still doesn't respond 



P.S: i'm reporting this bug to participate to mozilla bug bounty program.

Reproducible: Always

Comment 1

[Matthias Versen [:Matti]]

I get only a simple hang and no crash.
Please post a crash ID from about:crashes for this crash.

Comment 2

[Jonian Dervishi]

Hello Matthias, it actually hangs doesn't crash... sorry i didn't explain exactly... 
anyway i don't think it's just a "simple hang", its a hang that makes firefox unusable if you don't kill the app...

i tried in 2 PCs, dual core 2.6 with Windows 7 (CPU Usage: 46-50%) and single core 3.2 Ubuntu 10.10 (CPU USAGE around 70%) so it's not that it hangs because it uses all CPU resources...

Comment 3

[Matthias Versen [:Matti]]

>i don't think it's just a "simple hang", its a hang that makes firefox
>unusable if you don't kill the app

every hang makes the app unusable and you have to kill the application.
This is of course no major security issue. It would be only a DOS if this works on webpages.

Does this also happen if you use this JS in a webpage or only at the URL bar ?

Comment 4

[Jonian Dervishi]

it does happen if the js is used in webpage...

Comment 5

[Swarnava Sengupta (:Swarnava)]

cant reproduce on Firefox 11, 12b5,13 and 14

looks like op is not here around, if you can reproduce with latest build, feel free to reopen it!