Open
Bug 669292
Opened 15 years ago
Updated 3 years ago
large number of iframes results in DOS
Categories
(Core :: General, defect)
Tracking
()
NEW
People
(Reporter: bugfisch, Unassigned)
Details
(Whiteboard: [sg:dos]DUPEME)
Attachments
(1 file)
|
614 bytes,
application/octet-stream
|
Details |
User Agent: Mozilla/5.0 (X11; Linux i686; rv:5.0) Gecko/20100101 Firefox/5.0
Build ID: 20110622232052
Steps to reproduce:
I generated 2 html documents both containing a large number of iframes. the iframes in the one file pointed all to the the other file. the iframes in this file were again pointing to the first file and so on.
Actual results:
This resulted in a DOS (CPU usage 100%) on my Win XP Box (VirtualBox) and also on Win Vista. [This also works for Opera (latest version) and IE 8]
|
||
Comment 1•15 years ago
|
||
I ran the testcase for a while and it does use up a huge amount of system memory, there isn't any sign of memory corruption. This is a denial of service and as such, isn't eligible for the Bug Bounty Program. Thanks, though, for reporting this.
Group: core-security
Status: UNCONFIRMED → NEW
Ever confirmed: true
Whiteboard: [sg:dos]
|
|
||
Updated•15 years ago
|
Product: Firefox → Core
QA Contact: general → general
|
|
||
Comment 2•15 years ago
|
||
This is the "iframe recursion protections don't work well with mutual recursion and large branching factor" issue... Pretty sure we have existing bugs on this.
Whiteboard: [sg:dos] → [sg:dos]DUPEME
|
||
Updated•3 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•