Pure CSS crashes iPhones and affects some browsers

General discussion area and chat

Moderator: satrow

Forum rules
This General Discussions forum is an open chat area, so you can talk about almost any subject. Please keep things civil, though!

Please do try to somewhat stick to the relevance of this forum, which focuses on everything around the Pale Moon project and its user community. "Totally random" subjects don't really belong here, even in the general discussion area.
User avatar
Tomaso
Board Warrior
Board Warrior
Posts: 1017
Joined: Thu, 23 Jul 2015, 16:09
Location: Norway

Pure CSS crashes iPhones and affects some browsers

Unread postby Tomaso » Mon, 17 Sep 2018, 17:44

https://www.ghacks.net/2018/09/17/pure- ... s-iphones/
A couple of lines of code that runs in any modern web browser by default may crash Apple's Safari web browser, iPhones and affects select browsers as well.

TEST (WARNING: This is designed to crash certain browsers!):
https://cdn.rawgit.com/pwnsdx/ce64de2760996a6c432f06d612e33aea/raw/fb78440ee4bce427f0cde98a4e9feadfd9eed198/safari-reaper.html

Result: Pale Moon v28.0.1 is unaffected!
..but:
The developer promises code to crash or freeze Firefox in the coming week.


--

The same developer released a one-liner, JavaScript this time, that freezes Google Chrome and ChromeOS.

TEST (WARNING: This is designed to freeze certain browsers):
https://rawgit.com/pwnsdx/6c1049ed4e17a8dc3f36ba6a677b98a6/raw/2f254b43d91285c888b42e9b7d9270171ebb04ae/dos.html

Result: Pale Moon v28.0.1 freezes!

--

It is up to the browser's developers to fix the issue.
While it does lead to freezes or crashes only, it may lead to data loss due to that.
Last edited by Tomaso on Mon, 17 Sep 2018, 17:48, edited 2 times in total.

User avatar
Night Wing
Knows the dark side
Knows the dark side
Posts: 3603
Joined: Mon, 03 Oct 2011, 10:19
Location: Texas, USA

Re: Pure CSS crashes iPhones and affects some browsers

Unread postby Night Wing » Mon, 17 Sep 2018, 22:10

Tomaso wrote:TEST (WARNING: This is designed to freeze certain browsers)


If the address freezes Pale Moon, why did you put that on here for? In other words, I'm not senile enough to copy that address, open a tab, put the address in the Navigation Bar via "Paste and go" and see what DAMAGE it can do to Pale Moon.
Linux Mint 19 (Tara) Xfce 64 Bit (Default OS) with 64 Bit linux Pale Moon
Windows 7 SP1, 64 Bit (Backup OS) with 32 Bit windows Pale Moon

User avatar
back2themoon
Board Warrior
Board Warrior
Posts: 1239
Joined: Sun, 19 Aug 2012, 20:32

Re: Pure CSS crashes iPhones and affects some browsers

Unread postby back2themoon » Mon, 17 Sep 2018, 23:22

Not sure why this is supposed to be sensational? Some guy made a link that can crash browsers?

Great, just don't click on this guy's links. Unless this uncovers an underlying, valid security/coding etc. weakness, it doesn't make much sense.
Safe Mode / clean profile info: Help/Restart in Safe Mode
Information to include when asking for support - How to apply user agent overrides

Windows 10 Pro - Pale Moon x64 - FossaMail x64 - Emsisoft Anti-Malware

User avatar
Isengrim
Astronaut
Astronaut
Posts: 514
Joined: Tue, 08 Sep 2015, 22:54
Location: 127.0.0.1
Contact:

Re: Pure CSS crashes iPhones and affects some browsers

Unread postby Isengrim » Tue, 18 Sep 2018, 02:29

I guess it's sensational because it affects so many browsers at once.

And, the links are there so that people can (carefully) test with them to see if they get the same results.

Can confirm that the first link is okay, and the second causes a freeze on my Linux box.
Linux Mint 18.3 Cinnamon (64-bit)
Windows 7 (64-bit) (Sometimes)
Windows 10 build 1803 (64-bit) (Sometimes)
We are our choices.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 22319
Joined: Sun, 28 Aug 2011, 17:27
Location: 58.5°N 15.5°E
Contact:

Re: Pure CSS crashes iPhones and affects some browsers

Unread postby Moonchild » Tue, 18 Sep 2018, 05:58

Creating a DoS or "evil trap" page is nothing new. Anyone can make a simple recursive JavaScript blurb that will hang up any browser (because recursive calls are very hard to catch), for example.

Crashes (insofar as they aren't deliberate due to out-of-memory) are more interesting, but as indicated, Pale moon isn't affected.
Last edited by Moonchild on Tue, 18 Sep 2018, 06:01, edited 1 time in total.
Improving Mozilla code: You know you're on the right track with code changes when you spend the majority of your time deleting code.

"If you want to build a better world for yourself, you have to be willing to build one for everybody." -- Coyote Osborne

Take note: 23 November is Wolfenoot! Eat roast meat and/or cake decorated like the full moon. #wolfenoot

SLotman
Moonbather
Moonbather
Posts: 73
Joined: Sat, 30 Jan 2016, 16:59

Re: Pure CSS crashes iPhones and affects some browsers

Unread postby SLotman » Tue, 18 Sep 2018, 16:48

Awww... I came here happy to report Palemoon wasn't affected - you guys beat me :P


Return to “General discussion”

Who is online

Users browsing this forum: No registered users and 6 guests