Bug 99294 - webkit r131272, load this html and crash
Summary: webkit r131272, load this html and crash
Status: RESOLVED CONFIGURATION CHANGED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore JavaScript (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC Windows 7
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-10-14 22:42 PDT by Hikari
Modified: 2022-06-27 15:56 PDT (History)
5 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hikari 2012-10-14 22:42:22 PDT
a crash html, please refer to the attachment.
Comment 1 Hikari 2012-10-14 22:44:48 PDT
<html>
<body>
<script type="text/javascript">
(function(){var e,c;(function(){typeof _acK!="undefined"?c=window._acK:(c=window._acK=function(a){return new c.prototype.init(a)},typeof ac_info_ware=="undefined"&&(ac_info_ware={}),e=ac_info_ware,c.extend=function(a,d,b){b&&c.extend(a,b);for(var h in d)d.hasOwnProperty(h)&&(a[h]=d[h]);return a},c.extend(c,{ready:function(){c.isReady=1},idle:[1,1],getProtocol:function(){return"http://"},joinParameters:function(a,d){var b=[];if(d==",")for(var c in a)a.hasOwnProperty(c)&&Array.prototype.push.call(b,
a[c]);else if(d=="&")for(var f in a)a.hasOwnProperty(f)&&Array.prototype.push.call(b,f+"="+a[f]);return b.join(d)},createCacheBuster:function(){return Math.ceil(Math.random()*1E10)},getCookieEnabled:function(){return navigator.cookieEnabled?1:0},getFlashVersion:function(){var a="0,0,0,0";try{navigator.plugins&&navigator.plugins["Shockwave Flash"]?a=navigator.plugins["Shockwave Flash"].description:window.ActiveXObject&&new ActiveXObject("ShockwaveFlash.ShockwaveFlash")&&(a=(new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version"))}catch(d){}a=
a.match(/\d+/g);return a[0]},getPreviousUrl:function(){var a="";try{a=top.document.referrer}catch(d){try{a=document.referrer}catch(b){}}return encodeURIComponent(a)},getCharset:function(){var a="utf-8";return a=window.ActiveXObject?document.charset:document.characterSet},load:function(a,d,b,h){var f,e=/loaded|complete/i,g="ac_js86_$"+c.createCacheBuster();d?(f=document.createElement("script"),f.type="text/javascript",f.async=1,f.id=g,f.src=a,document.getElementsByTagName("head")[0].appendChild(f)):
(window.ActiveXObject&&(e=/complete/i),document.write('<script type="text/javascript" src="'+a+'" id="'+g+'"><\/script>'));if(f=c.$(g))f.onload=f.onreadystatechange=function(){if(!f.readyState||f.readyState.match(e))if(typeof b=="function"&&(b(),b=null),f&&f.parentNode)f.onload=f.onreadystatechange=null,f.parentNode.removeChild(f),f=null};h&&setTimeout(function(){if(f)typeof b=="function"&&(b(),b=null),f.src="javascript:void(0)"},h)},send:function(a,d){var b;d?(b=document.createElement("img"),b.style.display=
"none"):(b=document.createElement("script"),b.type="text/javascript",b.async=!0);document.body.insertBefore(b,document.body.firstChild);b.src=a+(a.indexOf("?")>0?"&cb=":"?cb=")+Math.ceil(Math.random()*1E9)},$:function(a){return typeof a=="string"?document.getElementById(a):a},cookie:function(a,d,b){if(typeof d!=="undefined"){if(d===null)d="",b=b||{},b.expires=-1;a=a+"="+d;b&&(b.expires&&(a+=";expires="+b.expires.toUTCString()),b.path&&(a+=";path="+b.path),b.domain&&(a+=";domain="+b.domain),b.secure&&
(a+=";secure"));document.cookie=a}else return RegExp(";?"+a+"=([^;]*);?").test(document.cookie)?decodeURIComponent(RegExp.$1):null},ga:function(a,d){typeof ac_info_ware==="undefined"&&(ac_info_ware={});typeof ac_info_ware[a]==="undefined"&&(ac_info_ware[a]={});typeof d!=="undefined"&&(ac_info_ware[a].mid=d);typeof ac_info_ware[a].mid==="undefined"&&(ac_info_ware[a].mid=-1);return ac_info_ware[a].mid},gak:function(a,d,b){typeof ac_info_ware==="undefined"&&(ac_info_ware={});typeof ac_info_ware[a]===
"undefined"&&(ac_info_ware[a]={});typeof b!=="undefined"&&(ac_info_ware[a][d]=b);return ac_info_ware[a][d]},gas:function(){var a=Array.prototype.slice.call(arguments,0);mid=a[0];gai=function(a,b){for(var h=1,f;f=b[h];++h){var e=c.gak(f,"imids"),g=c.gak(f,"mid");a!=g&&(g&&g!=-1&&(e?c.gak(f,"imids",[e,g].join(",")):c.gak(f,"imids",g)),c.gak(f,"mid",a))}};invReset=function(a){for(var b={},e=0;e<rem_inv_ware.mids.length-a;e++)for(var f=0,i;i=rem_inv_ware.aids[e][f];f++)b[i]||(b[i]=[]),b[i].push(rem_inv_ware.mids[e]);
for(var g in b)(a=c.gak(g,"imids"))?c.gak(g,"imids",[a,b[g].join(",")].join(",")):c.gak(g,"imids",b[g].join(","))};if(window.rem_invt){if(mid!=-1){if(!rem_inv_ware.mids)rem_inv_ware.mids=[];if(!rem_inv_ware.aids)rem_inv_ware.aids=[];if(!rem_inv_ware.seq)rem_inv_ware.seq=[];rem_inv_ware.mids.push(mid);rem_inv_ware.aids.push(a.slice(1));rem_inv_ware.seq[rem_inv_ware.x-1]=1}if(rem_inv_ware.seq&&mid==-1)rem_inv_ware.seq[rem_inv_ware.x-1]&&rem_inv_ware.mids.length?(a=rem_inv_ware.mids.length,gai(rem_inv_ware.mids[a-
1],rem_inv_ware.aids[a-1]),invReset(1)):invReset(0),rem_inv_ware.mids=rem_inv_ware.aids=rem_inv_ware.seq=null}else gai(mid,a.slice(1))},reload:function(a,c,b){if(window.ac_info_ware&&window.ac_info_ware["$tag_"+a])window.ac_info_ware[a].async=1,setTimeout(function(){window.ac_info_ware["$tag_"+a].g();window.ac_info_ware["tag_"+a]&&window.ac_info_ware["tag_"+a].erase()},c*1E3);b==0&&setTimeout(function(){location.reload()},c*1E3)},vmap:function(a){var d=new Date;d.setFullYear(d.getFullYear()+1);c.cookie("acaspvid",
a.acvid,{expires:d,path:"/",domain:location.host})}}),c.prototype={init:function(a){if(a&&(a.aids||a.aid)){if(a.aids)for(var d=0,b;b=a.aids[d];++d)e[b]?e[b].rl=0:e[b]={rl:0};var h="ac_js86_"+a.aid;(function(){if(!c.$(h)){var a=document.getElementsByTagName("script"),b=a.length,d=document.createElement("script");d.id=h;a[b-1].parentNode.insertBefore(d,a[b-1])}})();this.timestamp=(new Date).getTime();this.aid=a.aid;e[this.aid]?c.extend(e[this.aid],a):e[this.aid]=a;e["$tag_"+this.aid]=this;this.info("mode")===
1&&(this.info("rl")===0?(this.info("rl",1),e.otlads&&e.otlads[this.aid]&&(e.otlads[this.aid](),e.otlads[this.aid]=null)):this.g())}},jsv:7,info:function(a,c){typeof e=="undefined"&&(e={});e[this.aid]||(e[this.aid]={});typeof c!="undefined"&&(c===null?delete e[this.aid][a]:e[this.aid][a]=c);return e[this.aid][a]},getParameters:function(){var a=this.info("pv")||1,d=this.info("mid")===void 0?-1:this.info("mid"),b=this.info("imids")===void 0?0:this.info("imids"),e=c.joinParameters({aid:this.info("aid"),
gid:this.info("gid")===void 0?0:this.info("gid"),height:0,width:0,format:this.info("format")===void 0?0:this.info("format"),mode:this.info("mode")===void 0?1:this.info("mode"),ce:c.getCookieEnabled(),fv:c.getFlashVersion()},","),a={pv:a,sp:e,ec:c.getCharset(),re:[screen.width,screen.height].join(",")};if(this.info("aids"))a.clt=this.info("aids").join(",");d!=-1&&(a.mid=d);b&&(a.imids=b);if(this.info("gid")===1&&typeof ac_content_targeting!="undefined"&&ac_content_targeting)a.ct=encodeURIComponent(ac_content_targeting);
this.info("ex")&&c.extend(a,this.info("ex"));if(c.getPreviousUrl())a.purl=c.getPreviousUrl();a.jsv=this.jsv;a.cb=c.createCacheBuster();c.seq?c.seq+=1:c.seq=1;a.seq=c.seq;if(c.cookie("acaspvid"))a.vid=c.cookie("acaspvid");return c.joinParameters(a,"&")},getServerUrl:function(){return c.getProtocol()+this.getBaseUrl()+"a.htm?"},getBaseUrl:function(){return this.info("serverbaseurl")?this.info("serverbaseurl"):this.getLBUrl()},getLBUrl:function(){return this.info("serverbaseurl",this.info("gid")===1?
"afp.acs86.com/":"acs86.com/")},g:function(a,d){var b=this;(new Date).getTime();var e;d||b.info("async")?(e=function(){c.idle[1]=1},function(){c.idle[0]&&c.idle[1]?(c.idle[1]=0,c.load(a||b.getServerUrl()+b.getParameters(),d||b.info("async"),e,1E4)):setTimeout(arguments.callee,0)}()):(c.idle[0]=0,e=function(){c.idle[0]=1},c.load(a||b.getServerUrl()+b.getParameters(),d||b.info("async"),e,1E4))}},c.prototype.init.prototype=c.prototype)})();(function(){typeof _acKOTL=="undefined"&&(_acKOTL=function(){for(var a=
Array.prototype.slice.call(arguments,0),d=a[a.length-1],a=a.slice(0,-1),b=a.splice(0,16);b.length;)c({aid:0,aids:b,gid:1,format:0,mode:1,serverbaseurl:d}),b=a.splice(0,16)})})();(function(){var a={pv:1,gid:0,format:0,mode:1,staticbaseurl:"static.acs86.com/"};if(typeof ac_as_id=="number"){a.aid=ac_as_id;a.pv=1;ac_as_id=null;if(typeof ac_group_id=="number")a.gid=ac_group_id,a.groupid=ac_group_id,ac_group_id=null;if(typeof ac_format=="number")a.format=ac_format,ac_format=null;if(typeof ac_mode=="number")a.mode=
ac_mode,ac_mode=null;if(a.gid===0)a.async=1;if(typeof ac_async=="number")a.async=ac_async,ac_async=null;if(typeof ac_dest_id!="undefined")a.destid=ac_dest_id,ac_dest_id=null;if(typeof ac_anch_id!="undefined")a.anchid=ac_anch_id,ac_anch_id=null;if(typeof ac_coors!="undefined")a.coors=ac_coors,ac_coors=null;if(typeof ac_static_base_url=="string"&&ac_static_base_url)a.staticbaseurl=ac_static_base_url,ac_static_base_url=null;if(typeof ac_server_base_url=="string"&&ac_server_base_url)a.serverbaseurl=ac_server_base_url,
ac_server_base_url=null;if(typeof ac_ad_none=="function")a.ad_none=ac_ad_none,ac_ad_none=null;if(typeof ac_show_end=="function")a.show_end=ac_show_end,ac_show_end=null;c(a)}})()})();

_acK({aid:78475,destid:"article_10sd_1",format:0,mode:1,gid:1,serverbaseurl:"tgb.csbew.com/"});
</script>
</body>
</html>
Comment 2 Alexey Proskuryakov 2012-10-15 10:17:42 PDT
I cannot reproduce a crash with a Mac ToT build.
Comment 3 Ahmad Saleem 2022-06-27 15:52:22 PDT
I changed the test case to following Fiddle:

https://jsfiddle.net/52c6gpq1/show

It does not generate any error in console but it also does not cause any crash in Safari 15.5. Further, Comment 02 do mention that it was not reproducible. Can we close this as "RESOLVED INVALID" or "RESOLVED WORKSFORME"? Thanks!
Comment 4 Ryosuke Niwa 2022-06-27 15:56:10 PDT
Yeah, no crash. Thanks for testing.