Vulnerability Development mailing list archives

RE: ie6 input overflow


From: "Kayne Ian (Softlab)" <Ian.Kayne () softlab co uk>
Date: Mon, 19 Nov 2001 09:25:49 -0000

->

Responding). Note that a simple file open can not be splitted 
into several
thread (or NT fiber) because it is a single operation, API 

Maybe I'm missing the point here, but as far as I know you can create a
seperate thread that does this with little trouble, thus leaving the main
execution thread free from sitting in a wait state for the function call to
return. (Ok, so it would still be waiting for your file open thread to
return a "completed!" message, but at least the app wouldn't look like it
had gone on holiday...)

Ian Kayne
Technical Specialist - IT Solutions
Softlab Ltd - A BMW Company


-----Original Message-----
From: Peter Kovacs [mailto:petke () datanet hu]
Sent: Friday, November 16, 2001 7:53 AM
To: Emre Yildirim
Cc: Philip Wagenaar; vuln-dev () securityfocus com
Subject: Re: ie6 input overflow


On Thu, 15 Nov 2001, Emre Yildirim wrote:

Philip Wagenaar wrote:


value="1,000,000 x's here"
size="1000000"
maxlength="1000000"


Hmm that's funny.  My system froze up too (I'm not sure if 
I really used 
1,000,000 'x's though).  This is a 750Mhz machine with 
256MB RAM running 
XP Professional/IE6, all fixes applied.


-- 
Emre Yildirim <emre () asper org>
GPG KeyID 0xF9E4A1D1 (keyserver.pgp.com)

I think it's nothing more than a simple long time buffering.
You can reproduce this behaviur by opening a large document (ie. in
word) with size 2M. And watch the task manager. You will see 
word - Not
Responding.
The ``Not Responding" state nothing more than the core thread of
application -  that handle all the window events - can not read its
message qeue, so the event sent by task manager left unresponded (Not
Responding). Note that a simple file open can not be splitted 
into several
thread (or NT fiber) because it is a single operation, API 
call (fopen).

Thats all. I think.

Regards petke
~~~~~~~~~~~~~
Master of Engineering in Information Technology
IBM Certified AIX(4.3) System Administrator
Developer Engineer
GTS-DataNet
--------------------------------------------------------------
----------------




******************************************************************** 
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom 
they are addressed. 

If you are not the intended recipient or the person responsible for 
delivering to the intended recipient, be advised that you have received 
this email in error and that any use of the information contained within 
this email or attachments is strictly prohibited. 

Internet communications are not secure and Softlab does not accept 
any legal responsibility for the content of this message. Any opinions 
expressed in the email are those of the individual and not necessarily 
those of the Company. 

If you have received this email in error, or if you are concerned with 
the content of this email please notify the IT helpdesk by telephone 
on +44 (0)121 788 5480. 

********************************************************************


Current thread: