Open Bug 784032 Opened 8 years ago Updated 2 years ago

Stack overflow via window.print();


(Core :: DOM: Core & HTML, defect)

14 Branch
Not set



Tracking Status
firefox15 - ---
firefox16 - ---
firefox17 - ---


(Reporter: skyskif, Unassigned)


(5 keywords)


(1 file)

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1
Build ID: 20120713134347

Steps to reproduce:

moved to the site

Actual results:

It does not help stop the dialog boxes and program stopped

Expected results:

stop the dialog boxes
This sucks but it is either stack overflow or OOM, neither of which should be an exploitable crash. Clearing the flag so that more people can help fix.
Group: core-security
Sorry I do not understand, what flag?
There is no reason to track these for a specific release: they are not recent regressions nor serious security bugs.
Severity: normal → critical
Attachment #653374 - Attachment mime type: text/plain → text/html
Hangs Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Firefox/17.0 17.0a1 (2012-08-20)
Keywords: crashhang
OS: Windows XP → All
Attachment #653374 - Attachment description: 6.htm → Testcase (DANGEROUS, HANG!)
Component: Untriaged → DOM
Product: Firefox → Core
Keywords: csec-dos
Keywords: sec-other
(the crash report is long gone)
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.