Closed Bug 784032 Opened 12 years ago Closed 3 years ago

Stack overflow via window.print();

Categories

(Core :: DOM: Core & HTML, defect)

14 Branch
x86
All
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE
Tracking Status
firefox15 - ---
firefox16 - ---
firefox17 - ---

People

(Reporter: skyskif, Unassigned, NeedInfo)

Details

(5 keywords)

Attachments

(1 file)

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1
Build ID: 20120713134347

Steps to reproduce:

moved to the site



Actual results:

It does not help stop the dialog boxes and program stopped


Expected results:

stop the dialog boxes
This sucks but it is either stack overflow or OOM, neither of which should be an exploitable crash. Clearing the flag so that more people can help fix.
Group: core-security
Sorry I do not understand, what flag?
There is no reason to track these for a specific release: they are not recent regressions nor serious security bugs.
Severity: normal → critical
Attachment #653374 - Attachment mime type: text/plain → text/html
Hangs Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Firefox/17.0 17.0a1 (2012-08-20)
Keywords: crashhang
OS: Windows XP → All
Attachment #653374 - Attachment description: 6.htm → Testcase (DANGEROUS, HANG!)
Component: Untriaged → DOM
Product: Firefox → Core
Keywords: csec-dos
Keywords: sec-other
(the crash report is long gone)
Component: DOM → DOM: Core & HTML

Hi Boev!
With the attached test case, I was not able to reproduce this issue on Firefox Nightly 91.0a1 on Windows 10.
Because firefox has changed quite a bit, I'm wondering if you can share it again or if we can just resolve the issue.
Thanks!

Flags: needinfo?(skyskif)

Hi, I'll close this ticket due to a lack of information as Resolved-Incomplete. Please feel free to reopen it if you consider it necessary.

Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: