Issue 2579: tab_strip_model.cc can Crash Chrome.dll
http://code.google.com/p/chromium/issues/detail?id=2579
Comment #3 by lostmon:
The script source code basicaly open a new window in a infinite blucle
with 'while'
and try to write documet.location in document.domain , but this is only a
harder
script code to saturate the browser.
oks let´s go:
open the malicius html file , the browser try to open a multiple popups.
wait few seconds and make a fast doble click or tree ,in the X of the tab
for close
only this tab.
The browser crashing
I think that this is because it wen you click one time in the x the browser
close
the windows , but now the browser has no time to close because it is
saturate by
script,and wen you click again in the x for close again , the browser think
that
this tab is closed and you try to close a closed tab...
but it is only theory ...
Attachments:
Chrome_saturation.html 2.5 KB
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Chromium-bugs" group.
To post to this group, send email to chromium-bugs@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---
