155635 2016-03-18 04:03:16 -0700 Protect against excessive cache traversal 2016-03-18 10:59:33 -0700 1 1 1 Unclassified WebKit Page Loading WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 koivisto webkit-unassigned andersca beidson cdumez cgarcia commit-queue ddkilzer webkit-bug-importer oldest_to_newest 1176134 0 koivisto 2016-03-18 04:03:16 -0700 We can't handle unlimited number of cache traversals. Protect against clients trying it. 1176138 1 274404 koivisto 2016-03-18 04:13:56 -0700 Created attachment 274404 patch 1176139 2 koivisto 2016-03-18 04:14:16 -0700 rdar://problem/24241008 1176230 3 koivisto 2016-03-18 10:59:33 -0700 https://trac.webkit.org/r198429 274404 2016-03-18 04:13:56 -0700 2016-03-18 08:53:00 -0700 patch cache-traversal-limit.patch text/plain 2660 koivisto SW5kZXg6IFNvdXJjZS9XZWJLaXQyL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi S2l0Mi9DaGFuZ2VMb2cJKHJldmlzaW9uIDE5ODM5NCkKKysrIFNvdXJjZS9XZWJLaXQyL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIxIEBACisyMDE2LTAzLTE4ICBBbnR0aSBL b2l2aXN0byAgPGFudHRpQGFwcGxlLmNvbT4KKworICAgICAgICBQcm90ZWN0IGFnYWluc3QgZXhj ZXNzaXZlIGNhY2hlIHRyYXZlcnNhbAorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9z aG93X2J1Zy5jZ2k/aWQ9MTU1NjM1CisgICAgICAgIHJkYXI6Ly9wcm9ibGVtLzI0MjQxMDA4CisK KyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgV2UgY2FuJ3Qg aGFuZGxlIHVubGltaXRlZCBudW1iZXIgb2YgcGFyYWxsZWwgY2FjaGUgdHJhdmVyc2FsIHJlcXVl c3RzIGZyb20gdGhlIGNsaWVudC4KKyAgICAgICAgV2UnbGwgcnVuIG91dCBvZiBkaXNwYXRjaCBx dWV1ZXMgYW5kIG90aGVyIHN5c3RlbSByZXNvdXJjZXMuIENQVSB3aWxsIHNwaW4uCisKKyAgICAg ICAgKiBOZXR3b3JrUHJvY2Vzcy9jYWNoZS9OZXR3b3JrQ2FjaGUuY3BwOgorICAgICAgICAoV2Vi S2l0OjpOZXR3b3JrQ2FjaGU6OkNhY2hlOjp0cmF2ZXJzZSk6CisKKyAgICAgICAgICAgIEFkZCBs aW1pdCBvZiBtYXhpbXVtIDMgdHJhdmVyc2Fscy4gV2hlbiBleGNlZWRlZCByZXR1cm4gbm90aGlu ZyBhbmQgbG9nIGFuIGVycm9yLgorCisgICAgICAgICogTmV0d29ya1Byb2Nlc3MvY2FjaGUvTmV0 d29ya0NhY2hlLmg6CisKIDIwMTYtMDMtMTggIERhcmluIEFkbGVyICA8ZGFyaW5AYXBwbGUuY29t PgogCiAgICAgICAgIERpc2FibGUgQ2FjaGVzIGluIFNhZmFyaSdzIERldmVsb3AgbWVudSBkb2Vz IG5vdCBkaXNhYmxlIGNhY2hlcy4KSW5kZXg6IFNvdXJjZS9XZWJLaXQyL05ldHdvcmtQcm9jZXNz L2NhY2hlL05ldHdvcmtDYWNoZS5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYktpdDIvTmV0 d29ya1Byb2Nlc3MvY2FjaGUvTmV0d29ya0NhY2hlLmNwcAkocmV2aXNpb24gMTk4MzkzKQorKysg U291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvY2FjaGUvTmV0d29ya0NhY2hlLmNwcAkod29y a2luZyBjb3B5KQpAQCAtNTIxLDggKzUyMSwyMiBAQCB2b2lkIENhY2hlOjp0cmF2ZXJzZShjb25z dCBzdGQ6OmZ1bmN0aW9uCiB7CiAgICAgQVNTRVJUKGlzRW5hYmxlZCgpKTsKIAotICAgIG1fc3Rv cmFnZS0+dHJhdmVyc2UocmVzb3VyY2VUeXBlKCksIDAsIFt0cmF2ZXJzZUhhbmRsZXJdKGNvbnN0 IFN0b3JhZ2U6OlJlY29yZCogcmVjb3JkLCBjb25zdCBTdG9yYWdlOjpSZWNvcmRJbmZvJiByZWNv cmRJbmZvKSB7CisgICAgLy8gUHJvdGVjdCBhZ2FpbnN0IGNsaWVudHMgbWFraW5nIGV4Y2Vzc2l2 ZSB0cmF2ZXJzYWwgcmVxdWVzdHMuCisgICAgY29uc3QgdW5zaWduZWQgbWF4aW11bVRyYXZlcnNl Q291bnQgPSAzOworICAgIGlmIChtX3RyYXZlcnNlQ291bnQgPj0gbWF4aW11bVRyYXZlcnNlQ291 bnQpIHsKKyAgICAgICAgV1RGTG9nQWx3YXlzKCJNYXhpbXVtIHBhcmFsbGVsIGNhY2hlIHRyYXZl cnNlIGNvdW50IGV4Y2VlZGVkLiBJZ25vcmluZyB0cmF2ZXJzYWwgcmVxdWVzdC4iKTsKKworICAg ICAgICBSdW5Mb29wOjptYWluKCkuZGlzcGF0Y2goW3RyYXZlcnNlSGFuZGxlcl0geworICAgICAg ICAgICAgdHJhdmVyc2VIYW5kbGVyKG51bGxwdHIpOworICAgICAgICB9KTsKKyAgICAgICAgcmV0 dXJuOworICAgIH0KKworICAgICsrbV90cmF2ZXJzZUNvdW50OworCisgICAgbV9zdG9yYWdlLT50 cmF2ZXJzZShyZXNvdXJjZVR5cGUoKSwgMCwgW3RoaXMsIHRyYXZlcnNlSGFuZGxlcl0oY29uc3Qg U3RvcmFnZTo6UmVjb3JkKiByZWNvcmQsIGNvbnN0IFN0b3JhZ2U6OlJlY29yZEluZm8mIHJlY29y ZEluZm8pIHsKICAgICAgICAgaWYgKCFyZWNvcmQpIHsKKyAgICAgICAgICAgIC0tbV90cmF2ZXJz ZUNvdW50OwogICAgICAgICAgICAgdHJhdmVyc2VIYW5kbGVyKG51bGxwdHIpOwogICAgICAgICAg ICAgcmV0dXJuOwogICAgICAgICB9CkluZGV4OiBTb3VyY2UvV2ViS2l0Mi9OZXR3b3JrUHJvY2Vz cy9jYWNoZS9OZXR3b3JrQ2FjaGUuaAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0Mi9OZXR3 b3JrUHJvY2Vzcy9jYWNoZS9OZXR3b3JrQ2FjaGUuaAkocmV2aXNpb24gMTk4MzkzKQorKysgU291 cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvY2FjaGUvTmV0d29ya0NhY2hlLmgJKHdvcmtpbmcg Y29weSkKQEAgLTEzNSw2ICsxMzUsOCBAQCBwcml2YXRlOgogICAgIHN0ZDo6dW5pcXVlX3B0cjxT cGVjdWxhdGl2ZUxvYWRNYW5hZ2VyPiBtX3NwZWN1bGF0aXZlTG9hZE1hbmFnZXI7CiAjZW5kaWYK ICAgICBzdGQ6OnVuaXF1ZV9wdHI8U3RhdGlzdGljcz4gbV9zdGF0aXN0aWNzOworCisgICAgdW5z aWduZWQgbV90cmF2ZXJzZUNvdW50IHsgMCB9OwogfTsKIAogfQo=