Re: [Full-disclosure] Firefox <= 2.0 crash

You can test it out here if you want:

http://security-protocols.com/poc/ff2_death.html

Here is what I get on OS X with the latest build of ff2

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000004
0x001ea16b in nsParser::ParseFragment ()
(gdb) bt
#0  0x001ea16b in nsParser::ParseFragment ()
#1  0x00101748 in nsRange::CreateContextualFragment ()
#2  0x0185d98d in XPTC_InvokeByIndex ()
#3  0x0038ccfb in XPCWrappedNative::CallMethod ()

-- Tom

Matthew Flaschen wrote:
> Maybe I'm copying it out wrong.  Seems unlikely, but can someone who got 
> it to "work" (crash) upload it somewhere for a more standardized test?
>
> Matt Flaschen
>
> Ozan Ozkara wrote:
>   
> > it works perfect on linux 
> >
> > On Mon, 2006-10-30 at 11:38 -0500, Matthew Flaschen wrote:
> >     
> > > Nothing happens when I load it in Firefox 2.0 on Windows XP.
> > >
> > > Matthew Flaschen
> > >
> > > Carlos Barros wrote:
> > >       
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >     
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>   

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/