Bugtraq mailing list archives
Re: Object tag crashes Internet Explorer 4.0
From: alan () LXORGUK UKUU ORG UK (Alan Cox)
Date: Fri, 7 Aug 1998 20:00:16 +0100
This isn't even remotely true; and isn't made more valid by randomly mentioning the Turing problem (something tells me our Mr. Leach is not a computer scientist himself.) A fairly brute-force approach to their detection would be simply to keep a count of how many times each object had been displayed, and start throwing them away when it exceeded some limit - quite high for, say, images, to allow for the
The whole problem isnt one of completion but resource management and is classic computer science operating system course stuff. It doesnt matter if its 5000 recursive frames or a 50,000 x 50,000 gif the remote site tries to feed you or if its javascript tries to open 50,000 windows. At the end of the day the job is to prevent the unsafe data from the internet harming the machine or significantly impacting its function. Thats straight forward resource counting and a dialog box to say "Too complex" [Btw 50,000x50,000 blank gifs compress VERY well and folks might care to play with emailing them around a bit]
Current thread:
- Re: Object tag crashes Internet Explorer 4.0 Paul Leach (Aug 04)
- linux kernel patch - suid procs exec'd with bad 0,1,2 fds Zachary Amsden (Aug 04)
- Re: Object tag crashes Internet Explorer 4.0 Kragen (Aug 04)
- Re: Object tag crashes Internet Explorer 4.0 Pavel Kankovsky (Aug 05)
- Re: Object tag crashes Internet Explorer 4.0 David Damerell (Aug 06)
- Sendmail up to 8.9.1 - mail.local instroduces new class of bugs Michal Zalewski (Jul 09)
- Re: Sendmail up to 8.9.1 - mail.local instroduces new class of Jeremiah Rothschild (Aug 10)
- Re: Sendmail up to 8.9.1 - mail.local instroduces new class of Scott Stone (Aug 10)
- Network Associates Inc. Advisory (OpenBSD) Security Research Labs (Aug 10)
- Sendmail up to 8.9.1 - mail.local instroduces new class of bugs Michal Zalewski (Jul 09)
- Re: Object tag crashes Internet Explorer 4.0 Alan Cox (Aug 07)
- Description of the Eudora Security Hole Aleph One (Aug 07)
- resend Steve Bellovin (Aug 06)
- Re: resend Casper Dik (Aug 07)
- <Possible follow-ups>
- Re: Object tag crashes Internet Explorer 4.0 Paul Leach (Aug 04)
- Re: Object tag crashes Internet Explorer 4.0 Joe (Aug 05)
- Re: Object tag crashes Internet Explorer 4.0 Paul Leach (Aug 06)
- Re: Object tag crashes Internet Explorer 4.0 Roger Espel Llima (Aug 06)
- Re: Object tag crashes Internet Explorer 4.0 Paul Leach (Aug 06)
- Re: Object tag crashes Internet Explorer 4.0 Paul Leach (Aug 06)
- Re: Object tag crashes Internet Explorer 4.0 Paul Leach (Aug 06)
