RE: Buffer Overflow with all versions of Internet Explorer and Javacript.

From: Elan Hasson (elanat_private)
Date: Mon Jun 03 2002 - 20:47:11 PDT

  • Next message: Ron DuFresne: "RE: wireless woes in the triangle and beyond!" 

    That's why you enable the IE option that says something like "Run each
browser window in its own process"
That way when IE crashes it doesn't take all your porn windows down.

I always hated when that happened to me.


-----Original Message-----
From: Blue Boar [mailto:BlueBoarat_private]
Sent: Monday, June 03, 2002 5:35 PM
To: vuln-devat_private
Subject: Re: Buffer Overflow with all versions of Internet Explorer and
Javacript.


Elan Hasson wrote:
> Uh do you realize what is being done with that code?
>
> its the equivalent of
>
> function a(){
> 	return b();
> }
> function b(){
> 	return a();
> }
>
> its a fricken stack overflow. it'll happen anywhere.

Sure. And the halting problem says there will be an infinite number of
things like this that can be done, and you can't detect them ahead of time.
  My expectation would be for the browser vendors to handle problems like
this gracefully, have reasonable (and maybe tunable) resource limits set,
and not kill every one of my browser windows when one goes nuts.

						BB

    This archive was generated by hypermail 2b30 : Tue Jun 04 2002 - 09:21:18 PDT