New issue
Advanced search Search tips

Issue 654485 link

Starred by 3 users

Issue metadata

Status: Duplicate
Merged: issue 645913
Owner: ----
Closed: Oct 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: ----
Type: Bug



Sign in to add a comment

Chrome hangs if window navigated while file upload picker is open

Reported by thomas.r...@gmail.com, Oct 10 2016

Issue description

Hi Google Team,

I found a bug into the latest version of Google Chrome.
I put attached a small file with screenshot and the file that reproduce the bug (but it's working with any files). 
See below the description.

Thanks,
Thomas Roccia

VULNERABILITY DETAILS
The security issue is working with Chrome Browser. When you upload a file on a website and change the website with still the upload window open. You can load any file into Chrome, that makes a big freeze browser. Chrome is freezing directly. 
There is no crash only a freeze. You have to force to close Chrome to get back the control. 
Sometimes the bug is working directly, sometimes you have to upload 3 or more time a file to make the freeze.

VERSION
Chrome Version: [53.0.2785.143 m] + stable
Operating System: [Windows 10 Pro, Windows 8 pro, probably the other version of windows]

REPRODUCTION CASE
1 - Go to virustotal.com (for example) with Chrome
2 - Click on “Select a file” to upload
3 - Drag and drop a folder into Chrome via the open window
4 - The folder is now open in Chrome
5 - Then load any file via the open window
6 - Chrome is now crashing with Not Responding
7 - To get back the control you have to force close Chrome

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: I tried to create a crash with the Chrome Report but no crash was reported. As well I tried with windbg but it was not working.

Thomas
 
Google-Chrome-Bug.zip
896 KB Download
Components: UI>Browser>Navigation Blink>Forms
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Stability-Hang OS-Windows Type-Bug
I wasn't able to reproduce a hang, but Chrome probably should not allow navigation of the primary markup while a modal INPUT TYPE=FILE dialog is up.
Summary: Chrome hangs if window navigated while file upload picker is open (was: Security: Chrome crashing when uploading a file on a website)
If it's not working at the first try, you should try more. Sometimes it's working at the first time sometimes you have to try at least 3 or more time to get a hang.

Comment 4 by tkent@chromium.org, Oct 11 2016

Mergedinto: 645913
Status: Duplicate (was: Unconfirmed)

Sign in to add a comment