[Webkit-unassigned] [Bug 20299] DOMSubTreeModified event handler can cause 100% CPU use and stack exhaustion

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Aug 3 01:18:07 PDT 2012


Berend-Jan Wever <skylined at chromium.org> changed:

           What    |Removed                     |Added
            Product|Security                    |WebKit
            Version|Other                       |528+ (Nightly build)
           Severity|Critical                    |Normal
          Component|Security                    |HTML Events
              Group|Security-Sensitive          |

--- Comment #7 from Berend-Jan Wever <skylined at chromium.org>  2012-08-03 01:18:07 PST ---
Yes, I reported this way back when we (briefly) treated renderer DoS as a security issue. I've updated the flags, except importance as I have no idea what to set it to. You can probably just close this out, as we have more important things to focus on.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list