bugtraq - Apple Safari & Javascript - KERN_INVALID

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 9 Aug 2005 17:40:07 +1000
From: Patrick Webster <pwebster@...geo.com.au>
To: bugtraq@...urityfocus.com
Subject: Apple Safari & Javascript - KERN_INVALID_ADDRESS (0x0001)


Hi Guys,

Was trying to work out some code and came across a bug. Was wondering if 
it can be of any use ;-), or just a DoS?

I'm running OS X 1.3.9 & Safari 1.3 (132)

Create a HTML document, with the code below:

<html>
<script name="JavaScript">
<!--

function tickTock()
{
        setTimeout("tickTock()", 1000);
        thisTime = new Date()
        seconds = thisTime.getSeconds()
        document.write(seconds); 
}

// -->
</script>

<body onLoad="tickTock();">
</html>

Crash report is as follows:

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0xbf7fffa0

Regards,
-Patrick