Bug 10756

Summary:

[S60]S60Browser crashes on .innerhtml

Product:

WebKit

Reporter:

zalan <zalan>

Component:

WebKit Misc.

Assignee:

Nobody <webkit-unassigned>

Status:

CLOSED FIXED

Severity:

Normal

Keywords:

PlatformOnly

Priority:

Version:

420+

Hardware:

S60 Emulator

OS:

S60 3rd edition

Attachments:

Description	Flags
fix .innerhtml crash in htmlparser	koivisto: review+
test case for the innerhtml crash	none

Description zalan 2006-09-06 11:35:06 PDT

GTOO-6SALL6

S60Browser crashes when opening the following page: http://metasploit.com/users/hdm/tools/browserfun/mobb_031.html
More info here: http://www.frsirt.com/english/advisories/2006/3069
Report released on 31-Jul, advises about possibility of remote code execution. the memory corruption vulnerability is in the HTML parser inside WebCore.

Comment 1 zalan 2006-09-06 12:04:26 PDT

Created attachment 10421 [details]
fix .innerhtml crash in htmlparser

Comment 2 Antti Koivisto 2006-09-06 12:49:54 PDT

Comment on attachment 10421 [details]
fix .innerhtml crash in htmlparser

r=me

please add test case here as well

Comment 3 zalan 2006-09-06 12:54:40 PDT

Created attachment 10423 [details]
test case for the innerhtml crash

Comment 4 zalan 2006-09-06 13:27:38 PDT

r16253

Comment 5 Krishna 2006-09-08 08:39:21 PDT

Verified and Closed.

Comment 6 Joel Parks 2011-03-21 11:52:36 PDT

re-purposing InTSW keyword for use by QtWebkit team