Bug 99294
| Summary: | webkit r131272, load this html and crash | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Hikari <hikarikurai> |
| Component: | WebCore JavaScript | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED CONFIGURATION CHANGED | ||
| Severity: | Normal | CC: | ahmad.saleem792, ap, fpizlo, rniwa, roger_fong |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | PC | ||
| OS: | Windows 7 | ||
Hikari
a crash html, please refer to the attachment.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Hikari
<html>
<body>
<script type="text/javascript">
(function(){var e,c;(function(){typeof _acK!="undefined"?c=window._acK:(c=window._acK=function(a){return new c.prototype.init(a)},typeof ac_info_ware=="undefined"&&(ac_info_ware={}),e=ac_info_ware,c.extend=function(a,d,b){b&&c.extend(a,b);for(var h in d)d.hasOwnProperty(h)&&(a[h]=d[h]);return a},c.extend(c,{ready:function(){c.isReady=1},idle:[1,1],getProtocol:function(){return"http://"},joinParameters:function(a,d){var b=[];if(d==",")for(var c in a)a.hasOwnProperty(c)&&Array.prototype.push.call(b,
a[c]);else if(d=="&")for(var f in a)a.hasOwnProperty(f)&&Array.prototype.push.call(b,f+"="+a[f]);return b.join(d)},createCacheBuster:function(){return Math.ceil(Math.random()*1E10)},getCookieEnabled:function(){return navigator.cookieEnabled?1:0},getFlashVersion:function(){var a="0,0,0,0";try{navigator.plugins&&navigator.plugins["Shockwave Flash"]?a=navigator.plugins["Shockwave Flash"].description:window.ActiveXObject&&new ActiveXObject("ShockwaveFlash.ShockwaveFlash")&&(a=(new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version"))}catch(d){}a=
a.match(/\d+/g);return a[0]},getPreviousUrl:function(){var a="";try{a=top.document.referrer}catch(d){try{a=document.referrer}catch(b){}}return encodeURIComponent(a)},getCharset:function(){var a="utf-8";return a=window.ActiveXObject?document.charset:document.characterSet},load:function(a,d,b,h){var f,e=/loaded|complete/i,g="ac_js86_$"+c.createCacheBuster();d?(f=document.createElement("script"),f.type="text/javascript",f.async=1,f.id=g,f.src=a,document.getElementsByTagName("head")[0].appendChild(f)):
(window.ActiveXObject&&(e=/complete/i),document.write('<script type="text/javascript" src="'+a+'" id="'+g+'"><\/script>'));if(f=c.$(g))f.onload=f.onreadystatechange=function(){if(!f.readyState||f.readyState.match(e))if(typeof b=="function"&&(b(),b=null),f&&f.parentNode)f.onload=f.onreadystatechange=null,f.parentNode.removeChild(f),f=null};h&&setTimeout(function(){if(f)typeof b=="function"&&(b(),b=null),f.src="javascript:void(0)"},h)},send:function(a,d){var b;d?(b=document.createElement("img"),b.style.display=
"none"):(b=document.createElement("script"),b.type="text/javascript",b.async=!0);document.body.insertBefore(b,document.body.firstChild);b.src=a+(a.indexOf("?")>0?"&cb=":"?cb=")+Math.ceil(Math.random()*1E9)},$:function(a){return typeof a=="string"?document.getElementById(a):a},cookie:function(a,d,b){if(typeof d!=="undefined"){if(d===null)d="",b=b||{},b.expires=-1;a=a+"="+d;b&&(b.expires&&(a+=";expires="+b.expires.toUTCString()),b.path&&(a+=";path="+b.path),b.domain&&(a+=";domain="+b.domain),b.secure&&
(a+=";secure"));document.cookie=a}else return RegExp(";?"+a+"=([^;]*);?").test(document.cookie)?decodeURIComponent(RegExp.$1):null},ga:function(a,d){typeof ac_info_ware==="undefined"&&(ac_info_ware={});typeof ac_info_ware[a]==="undefined"&&(ac_info_ware[a]={});typeof d!=="undefined"&&(ac_info_ware[a].mid=d);typeof ac_info_ware[a].mid==="undefined"&&(ac_info_ware[a].mid=-1);return ac_info_ware[a].mid},gak:function(a,d,b){typeof ac_info_ware==="undefined"&&(ac_info_ware={});typeof ac_info_ware[a]===
"undefined"&&(ac_info_ware[a]={});typeof b!=="undefined"&&(ac_info_ware[a][d]=b);return ac_info_ware[a][d]},gas:function(){var a=Array.prototype.slice.call(arguments,0);mid=a[0];gai=function(a,b){for(var h=1,f;f=b[h];++h){var e=c.gak(f,"imids"),g=c.gak(f,"mid");a!=g&&(g&&g!=-1&&(e?c.gak(f,"imids",[e,g].join(",")):c.gak(f,"imids",g)),c.gak(f,"mid",a))}};invReset=function(a){for(var b={},e=0;e<rem_inv_ware.mids.length-a;e++)for(var f=0,i;i=rem_inv_ware.aids[e][f];f++)b[i]||(b[i]=[]),b[i].push(rem_inv_ware.mids[e]);
for(var g in b)(a=c.gak(g,"imids"))?c.gak(g,"imids",[a,b[g].join(",")].join(",")):c.gak(g,"imids",b[g].join(","))};if(window.rem_invt){if(mid!=-1){if(!rem_inv_ware.mids)rem_inv_ware.mids=[];if(!rem_inv_ware.aids)rem_inv_ware.aids=[];if(!rem_inv_ware.seq)rem_inv_ware.seq=[];rem_inv_ware.mids.push(mid);rem_inv_ware.aids.push(a.slice(1));rem_inv_ware.seq[rem_inv_ware.x-1]=1}if(rem_inv_ware.seq&&mid==-1)rem_inv_ware.seq[rem_inv_ware.x-1]&&rem_inv_ware.mids.length?(a=rem_inv_ware.mids.length,gai(rem_inv_ware.mids[a-
1],rem_inv_ware.aids[a-1]),invReset(1)):invReset(0),rem_inv_ware.mids=rem_inv_ware.aids=rem_inv_ware.seq=null}else gai(mid,a.slice(1))},reload:function(a,c,b){if(window.ac_info_ware&&window.ac_info_ware["$tag_"+a])window.ac_info_ware[a].async=1,setTimeout(function(){window.ac_info_ware["$tag_"+a].g();window.ac_info_ware["tag_"+a]&&window.ac_info_ware["tag_"+a].erase()},c*1E3);b==0&&setTimeout(function(){location.reload()},c*1E3)},vmap:function(a){var d=new Date;d.setFullYear(d.getFullYear()+1);c.cookie("acaspvid",
a.acvid,{expires:d,path:"/",domain:location.host})}}),c.prototype={init:function(a){if(a&&(a.aids||a.aid)){if(a.aids)for(var d=0,b;b=a.aids[d];++d)e[b]?e[b].rl=0:e[b]={rl:0};var h="ac_js86_"+a.aid;(function(){if(!c.$(h)){var a=document.getElementsByTagName("script"),b=a.length,d=document.createElement("script");d.id=h;a[b-1].parentNode.insertBefore(d,a[b-1])}})();this.timestamp=(new Date).getTime();this.aid=a.aid;e[this.aid]?c.extend(e[this.aid],a):e[this.aid]=a;e["$tag_"+this.aid]=this;this.info("mode")===
1&&(this.info("rl")===0?(this.info("rl",1),e.otlads&&e.otlads[this.aid]&&(e.otlads[this.aid](),e.otlads[this.aid]=null)):this.g())}},jsv:7,info:function(a,c){typeof e=="undefined"&&(e={});e[this.aid]||(e[this.aid]={});typeof c!="undefined"&&(c===null?delete e[this.aid][a]:e[this.aid][a]=c);return e[this.aid][a]},getParameters:function(){var a=this.info("pv")||1,d=this.info("mid")===void 0?-1:this.info("mid"),b=this.info("imids")===void 0?0:this.info("imids"),e=c.joinParameters({aid:this.info("aid"),
gid:this.info("gid")===void 0?0:this.info("gid"),height:0,width:0,format:this.info("format")===void 0?0:this.info("format"),mode:this.info("mode")===void 0?1:this.info("mode"),ce:c.getCookieEnabled(),fv:c.getFlashVersion()},","),a={pv:a,sp:e,ec:c.getCharset(),re:[screen.width,screen.height].join(",")};if(this.info("aids"))a.clt=this.info("aids").join(",");d!=-1&&(a.mid=d);b&&(a.imids=b);if(this.info("gid")===1&&typeof ac_content_targeting!="undefined"&&ac_content_targeting)a.ct=encodeURIComponent(ac_content_targeting);
this.info("ex")&&c.extend(a,this.info("ex"));if(c.getPreviousUrl())a.purl=c.getPreviousUrl();a.jsv=this.jsv;a.cb=c.createCacheBuster();c.seq?c.seq+=1:c.seq=1;a.seq=c.seq;if(c.cookie("acaspvid"))a.vid=c.cookie("acaspvid");return c.joinParameters(a,"&")},getServerUrl:function(){return c.getProtocol()+this.getBaseUrl()+"a.htm?"},getBaseUrl:function(){return this.info("serverbaseurl")?this.info("serverbaseurl"):this.getLBUrl()},getLBUrl:function(){return this.info("serverbaseurl",this.info("gid")===1?
"afp.acs86.com/":"acs86.com/")},g:function(a,d){var b=this;(new Date).getTime();var e;d||b.info("async")?(e=function(){c.idle[1]=1},function(){c.idle[0]&&c.idle[1]?(c.idle[1]=0,c.load(a||b.getServerUrl()+b.getParameters(),d||b.info("async"),e,1E4)):setTimeout(arguments.callee,0)}()):(c.idle[0]=0,e=function(){c.idle[0]=1},c.load(a||b.getServerUrl()+b.getParameters(),d||b.info("async"),e,1E4))}},c.prototype.init.prototype=c.prototype)})();(function(){typeof _acKOTL=="undefined"&&(_acKOTL=function(){for(var a=
Array.prototype.slice.call(arguments,0),d=a[a.length-1],a=a.slice(0,-1),b=a.splice(0,16);b.length;)c({aid:0,aids:b,gid:1,format:0,mode:1,serverbaseurl:d}),b=a.splice(0,16)})})();(function(){var a={pv:1,gid:0,format:0,mode:1,staticbaseurl:"static.acs86.com/"};if(typeof ac_as_id=="number"){a.aid=ac_as_id;a.pv=1;ac_as_id=null;if(typeof ac_group_id=="number")a.gid=ac_group_id,a.groupid=ac_group_id,ac_group_id=null;if(typeof ac_format=="number")a.format=ac_format,ac_format=null;if(typeof ac_mode=="number")a.mode=
ac_mode,ac_mode=null;if(a.gid===0)a.async=1;if(typeof ac_async=="number")a.async=ac_async,ac_async=null;if(typeof ac_dest_id!="undefined")a.destid=ac_dest_id,ac_dest_id=null;if(typeof ac_anch_id!="undefined")a.anchid=ac_anch_id,ac_anch_id=null;if(typeof ac_coors!="undefined")a.coors=ac_coors,ac_coors=null;if(typeof ac_static_base_url=="string"&&ac_static_base_url)a.staticbaseurl=ac_static_base_url,ac_static_base_url=null;if(typeof ac_server_base_url=="string"&&ac_server_base_url)a.serverbaseurl=ac_server_base_url,
ac_server_base_url=null;if(typeof ac_ad_none=="function")a.ad_none=ac_ad_none,ac_ad_none=null;if(typeof ac_show_end=="function")a.show_end=ac_show_end,ac_show_end=null;c(a)}})()})();
_acK({aid:78475,destid:"article_10sd_1",format:0,mode:1,gid:1,serverbaseurl:"tgb.csbew.com/"});
</script>
</body>
</html>
Alexey Proskuryakov
I cannot reproduce a crash with a Mac ToT build.
Ahmad Saleem
I changed the test case to following Fiddle:
https://jsfiddle.net/52c6gpq1/show
It does not generate any error in console but it also does not cause any crash in Safari 15.5. Further, Comment 02 do mention that it was not reproducible. Can we close this as "RESOLVED INVALID" or "RESOLVED WORKSFORME"? Thanks!
Ryosuke Niwa
Yeah, no crash. Thanks for testing.