[Webkit-unassigned] [Bug 24796] New: Page can create many workers and lock up browser and os

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=24796

           Summary: Page can create many workers and lock up browser and os
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jarbon at gmail.com
                CC: dimich at chromium.org, levin at chromium.org


A script on a page that creates many (1000's) of workers, can lock up the
browser, and even the OS.  The concern is that poorly written web apps, or
malicious users could DOS the browser/os.

Repro: run the attached script (note the worker js file should be in a
'resources' subfolder).

Actual:
1. Browser and OS become unresponsive

Expected:
1. Browser and OS do not become unrsponsive
2. Perhaps the unresponsive scipt dialog appears for misbehaving webapps
3. Perhaps we use a thread pool and/or throttle on cpu/resource consumption to
prevent this from happening.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.