[Full-disclosure] Firefox <= 2.0 crash
Matthew Flaschen
matthew.flaschen at gatech.edu
Tue Oct 31 03:04:29 GMT 2006
Thanks. I got a crash with that version. Afterwards, I checked and
found I had forgotten the DOCTYPE tag.
Matthew Flaschen
tommy wrote:
> You can test it out here if you want:
>
> http://security-protocols.com/poc/ff2_death.html
>
> Here is what I get on OS X with the latest build of ff2
>
> Program received signal EXC_BAD_ACCESS, Could not access memory.
> Reason: KERN_PROTECTION_FAILURE at address: 0x00000004
> 0x001ea16b in nsParser::ParseFragment ()
> (gdb) bt
> #0 0x001ea16b in nsParser::ParseFragment ()
> #1 0x00101748 in nsRange::CreateContextualFragment ()
> #2 0x0185d98d in XPTC_InvokeByIndex ()
> #3 0x0038ccfb in XPCWrappedNative::CallMethod ()
>
> -- Tom
>
> Matthew Flaschen wrote:
>> Maybe I'm copying it out wrong. Seems unlikely, but can someone who got
>> it to "work" (crash) upload it somewhere for a more standardized test?
>>
>> Matt Flaschen
>>
>> Ozan Ozkara wrote:
>>
>>> it works perfect on linux
>>>
>>> On Mon, 2006-10-30 at 11:38 -0500, Matthew Flaschen wrote:
>>>
>>>> Nothing happens when I load it in Firefox 2.0 on Windows XP.
>>>>
>>>> Matthew Flaschen
>>>>
>>>> Carlos Barros wrote:
>>>>
>>> ------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> Full-Disclosure - We believe in it.
>>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>>> Hosted and sponsored by Secunia - http://secunia.com/
>>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
>
Full-Disclosure is hosted and sponsored by Secunia.