lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20040628200115.GA5201@acm.jhu.edu>
Date: Mon, 28 Jun 2004 16:01:15 -0400
From: Jack Lloyd <lloyd@...dombit.net>
To: bugtraq@...urityfocus.com
Subject: Re: Java applet crashing with native assertion


This also crashes Firefox 0.8 with j2re 1.4.2_04 on RH9/x86 with the following:

java_vm: ../../../src/share/native/sun/awt/font/fontmanager/fontobjects/fontObject.cpp:418: const void * fileFontObject::ReadChunk(UInt32, UInt32, void * = 0): Assertion `offset < fFileSize' failed.
INTERNAL ERROR on Browser End: Pipe closed during read? State may be corrupt
System error?:: Success

Of course the whole idea is that Java apps will behave the same on all
supported platforms, right? :)

-Jack

On Mon, Jun 28, 2004 at 09:11:53PM +0200, Marc Schoenefeld wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi,
> 
> this is a Java One special:
> 
> Three months ago I informed Sun Microsystems
> about an applet alerting with a native win32 assertion
> (Expression: offset < fFileSize
> 
> For information on how your program can cause an
> assertion failure, see the Visual C++ documentation
> on asserts...) .
> 
> If the users opts for cancel, it is crashing the browser
> which started the applet.
> 
> The applet can be tried at the following URL:
> http://www.illegalaccess.org/cms/?q=node/view/9
> 
> [How] does it crash on other platforms ? Please mail me
> your experiences with it ...
> 
> Marc
> 
> 
> 
> 
> - --
> 
> Never be afraid to try something new. Remember, amateurs built the
> ark; professionals built the Titanic. -- Anonymous
> 
> Marc Sch?nefeld Dipl. Wirtsch.-Inf. / Software Developer
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (AIX)
> 
> iD8DBQFA4G18qCaQvrKNUNQRAppNAJ0domKCgHOCBakVn/QkDKKLPiJ1pQCfe1Vl
> Ka/1oXn3+w8WC1XKNaGco9w=
> =yNEJ
> -----END PGP SIGNATURE-----


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ