Chrome 121 Javascript Fork Malloc Bomb

2024.01.29
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

Searching the web for `javascript fork malloc bomb` returns results, e.g. [here][1]: and [here][2]: We got a javascript fork malloc bomb which crashed Chrome 121 on linux with SIGILL and about one in five runs the virtual machine freezes. SIGILL almost always is a sign of memory corruption :) On android it crashes the current tab without explanation. Firefox 121 on linux also crashes the current tab. In all cases except the sporadic freezes, the browser remains functioning, not counting the crashed tab. The javscript code is simply simple: `setInterval("document.body.innerHTML += document.body.innerHTML ",1);` [Online demo][3]: In case someone wants to test it on other browsers or debug. The GNU/linux tests took about 1.5 minutes in a virtual machine with 4GB RAM and single core. [1]: http://wiki.glitchdata.com/index.php/Examples_of_fork_bombs#JavaScript [2]: https://gist.github.com/betandr/f0cbbb663accc3a76c11cc7661711566#javascript [3]: https://www.guninski.com/fork1.html


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top