Humongous value of <option> crashes X server
Reported by
webmas...@kazer.es,
Nov 29 2016
|
|||||||||
Issue descriptionUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36 Steps to reproduce the problem: 1. Create an <option> with a value of 44349 characters. 2. Browse the page with the browser. 3. Select the humongous <option> What is the expected behavior? The X server does not crash when selecting an <option> with a very large value. What went wrong? The X server crashes. Crashed report ID: How much crashed? Whole browser Is it a problem with a plugin? No Did this work before? N/A Chrome version: 54.0.2840.59 Channel: stable OS Version: ArchLinux, kernel 4.8.10-1 Flash Version: Shockwave Flash 23.0 r0 journalctl output attached. The concrete option value that caused the crash is confidential, but it contained 3 xdebug stacktraces.
,
Dec 1 2016
webmaster@ could you please provide the sample url to reproduce the issue from our end. Thanks..
,
Dec 1 2016
,
Dec 12 2016
I've run into this as well, on Ubuntu using Cinnamon. (see https://bugs.chromium.org/p/gerrit/issues/detail?id=5085) Attached is a minimized test case, where all of Hamlet is in the <option></option> tag. To replicate: Open html file in Chrome. Click on option. Observe Cinnamon crash or hang.
,
Feb 9 2017
Unable to reproduce this issue on Ubuntu 14.04 using chrome latest stable M56-56.0.2924.87. By opening the provided test case clicked on drop down and selected the long content, Observed no crashes. Reporter@ - Could you please confirm is this issue is still observed on latest stable M-56? If crash is still seen could you please provide sample crash ID's from chrome://crashes for further investigation. Thanks!
,
Feb 9 2017
I can still get this to happen on 56.0.2924.87 (64-bit) on a flavor like Ubuntu 14.04 using the testcase in #c4. Crash ID: crash/0e4d7b7c80000000 Crash ID: crash/0764bb7c80000000
,
Feb 14 2017
,
Feb 21 2017
Thank you for providing more feedback. Adding requester "sureshkumari@chromium.org" for another review and adding "Needs-Review" label for tracking. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Mar 13 2017
Cleaning up "Needs-Review" label as we are not using this label for triage. Ref bug 684919
,
Mar 13 2017
,
Mar 15 2018
Issue has not been modified or commented on in the last 365 days, please re-open or file a new bug if this is still an issue. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||
►
Sign in to add a comment |
|||||||||
Comment 1 by ajha@chromium.org
, Nov 29 2016