Full Disclosure mailing list archives
Re: Internet Explorer Crash
From: "Michele Cicciotti" <mc () khamsa net>
Date: Wed, 18 Apr 2007 18:52:02 +0200
There should be an implimentation on ALL browsers that a loop such large is unacceptable and refuse to even run it. There is no viable reason for a client-side to run a loop through so many itterations.
It's an unsolvable problem in computer science: a program (the browser) cannot calculate exactly how long another program (the script) will execute except by executing it... thus running at least as long as the latter. Proven mathematically, inescapable fact. The PoC at hand only demonstrates the easiest case, but there are infinitely more possible ones. The only safe way out is a timeout, like Internet Explorer (or PHP on the server side) implements _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Internet Explorer Crash J. Oquendo (Apr 17)
- Re: Internet Explorer Crash Nikolay Kichukov (Apr 17)
- Re: Internet Explorer Crash Michal Majchrowicz (Apr 17)
- Re: Internet Explorer Crash Troy (Apr 17)
- Re: Internet Explorer Crash Kradorex Xeron (Apr 18)
- Re: Internet Explorer Crash Valdis . Kletnieks (Apr 18)
- Re: Internet Explorer Crash Pavel Kankovsky (Apr 21)
- Re: Internet Explorer Crash cardoso (Apr 21)
- Re: Internet Explorer Crash Valdis . Kletnieks (Apr 18)
- Re: Internet Explorer Crash Nikolay Kichukov (Apr 17)
- Message not available
- Re: Internet Explorer Crash Michele Cicciotti (Apr 18)
- <Possible follow-ups>
- Internet Explorer Crash carl hardwick (Apr 17)
- Re: Internet Explorer Crash 3APA3A (Apr 17)
- Re: Internet Explorer Crash Dr. Neal Krawetz, PhD (Apr 17)