Vulnerability Development mailing list archives

Re: Buffer Overflow with all versions of Internet Explorer and Javacript.


From: Blue Boar <BlueBoar () thievco com>
Date: Mon, 03 Jun 2002 14:35:08 -0700

Elan Hasson wrote:
Uh do you realize what is being done with that code?

its the equivalent of

function a(){
        return b();
}
function b(){
        return a();
}

its a fricken stack overflow. it'll happen anywhere.

Sure. And the halting problem says there will be an infinite number of things like this that can be done, and you can't detect them ahead of time. My expectation would be for the browser vendors to handle problems like this gracefully, have reasonable (and maybe tunable) resource limits set, and not kill every one of my browser windows when one goes nuts.

                                                BB


Current thread: