OOM crash in widget::TaskbarTabPreview::SetTooltip with very long page title

RESOLVED INCOMPLETE

Status

()

Core
Widget: Win32
RESOLVED INCOMPLETE
4 years ago
27 days ago

People

(Reporter: Sergey Belov, Unassigned)

Tracking

26 Branch
x86_64
Windows 7
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

4 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36

Steps to reproduce:

Create page with very long title. E.g. : http://sergeybelove.ru/title.php
Source code:
<html>
<head>
    <title>0x<?php for ($i=1; $i<PHP_INT_MAX; $i++) echo "test"; ?></title>
</head>
</html>


Actual results:

Browser crashed


Expected results:

Message for user "This page cannot be dispalyed" or something like this.
What is the crash report you get?  If you go into about:crashes, it will show it.
(Reporter)

Comment 2

4 years ago
https://crash-stats.mozilla.com/report/index/a7b4c429-445e-4889-a305-f4e532140120
Group: core-security
Component: Untriaged → Widget: Win32
Product: Firefox → Core
Summary: DoS (title) → OOM crash in widget::TaskbarTabPreview::SetTooltip with very long page title

Updated

27 days ago
Status: UNCONFIRMED → RESOLVED
Last Resolved: 27 days ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.