New issue
Advanced search Search tips

Issue 759368 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 394296
Owner:
Closed: Aug 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug



Sign in to add a comment

Browser crashing with browser history

Reported by cryza...@gmail.com, Aug 27 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0

Steps to reproduce the problem:
1. Open the developer tools or just create a quick html page with the following code

var total = "";
for(var i = 0; i < 1000000000000000; i++) {
    total = total + i.toString();
    history.pushState(0,0, total);
}

2. Wait a second and the browser/site will crash.
3. Sometimes (Windows related) the CPU load goes even up to 100% because of the RAM management.

What is the expected behavior?
That the Site which abuses this method will immediately shutdown.

What went wrong?
The browser crashed and even the CPU load goes up 100%.

Did this work before? No 

Chrome version: 60.0.3112.113 (Offizieller Build) (64-Bit)  Channel: stable
OS Version: 10.0
Flash Version: 24.0.0.189 internal-not-yet-present
 
Labels: M-62 Needs-Triage-M60 Performance Stability-Crash OS-Linux OS-Mac
Status: Untriaged (was: Unconfirmed)
Able to reproduce this issue on Ubuntu 14.04, Mac OS 10.12.6 and Windows-10 using chrome latest stable #60.0.3112.113 by following steps mentioned in the original comment. 

This issue is seen on older version of chrome M45-45.0.2454.101 as well. Considering this is a non-regression issue and marking it as untriaged.

Thanks!
Components: -Blink UI>Browser>Navigation

Comment 3 by creis@chromium.org, Aug 28 2017

Mergedinto: 394296
Owner: kinuko@chromium.org
Status: Duplicate (was: Untriaged)
This is basically  issue 394296 , and I think kinuko@'s plans in  issue 672370  are what we need to prevent IPC floods / denial of service.

Comment 4 by creis@chromium.org, Aug 28 2017

Also, palmer's r485498 looks like it will mitigate this particular approach.

Sign in to add a comment