RESOLVED WORKSFORME 19270
WebKit crashes running IE Bait & Switch attack page 
https://bugs.webkit.org/show_bug.cgi?id=19270
Summary WebKit crashes running IE Bait & Switch attack page
Eric Seidel (no email)
Reported 2008-05-27 11:29:44 PDT
WebKit crashes running IE Bait & Switch attack page Mac Safari does not seem vulnerable to the IE Bait and Switch attack. I don't really suspect that Win Safari is either. However, closing the attack window (the window which pops up and loads google.pl repeatedly) while the test is running crashes Safari. I was using Safari 3.1 with heap-checking enabled (gflags.exe). 1. Open http://lcamtuf.coredump.cx/ierace/ 2. Click on "Click here to begin test" 3. Close the window that appears and is running the test (opening google.pl repeatedly). 4. Crash!
Attachments
Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2010-03-31 16:37:29 PDT
Eric, does this still happen for you? Could you attach a crash log?
Eric Seidel (no email)
Comment 2 2010-03-31 16:38:57 PDT
I haven't used Windows Safari in a very long time.
Note You need to log in before you can comment on or make changes to this bug.