Re: [Full-disclosure] Firefox <= 2.0 crash



You can test it out here if you want:

http://security-protocols.com/poc/ff2_death.html

Here is what I get on OS X with the latest build of ff2

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000004
0x001ea16b in nsParser::ParseFragment ()
(gdb) bt
#0 0x001ea16b in nsParser::ParseFragment ()
#1 0x00101748 in nsRange::CreateContextualFragment ()
#2 0x0185d98d in XPTC_InvokeByIndex ()
#3 0x0038ccfb in XPCWrappedNative::CallMethod ()

-- Tom

Matthew Flaschen wrote:
Maybe I'm copying it out wrong. Seems unlikely, but can someone who got
it to "work" (crash) upload it somewhere for a more standardized test?

Matt Flaschen

Ozan Ozkara wrote:

it works perfect on linux

On Mon, 2006-10-30 at 11:38 -0500, Matthew Flaschen wrote:

Nothing happens when I load it in Firefox 2.0 on Windows XP.

Matthew Flaschen

Carlos Barros wrote:

------------------------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages