News for hackers. Stuff that matters.

A comment on Favicon bug.

Re:Favicon bug by tomjepp on Monday June 15, 2015 @07:40PM (#9722905)
Even better - this works with compressed favicons.

Take http://pastie.org/10242118 and create yourself a favicon file:

dd if=/dev/zero of=favicon.png bs=1M count=4096

gzip -9 favicon.png

you can now crash lots of browsers with minimal bandwidth usage :)

demo: http://dev.tomjepp.uk/

[ Parent | on HN ]
Re:Favicon bug by tomjepp on Monday June 15, 2015 @07:45PM (#9722928)
This makes a 4GB file when decompressed and is plenty large enough to crash a 32-bit browser. You may need a larger file to reliably crash 64-bit browsers.
[ Parent | on HN ]
Re:Favicon bug by jfoster on Tuesday June 16, 2015 @02:08AM (#9724062)
Haven't tried it, but does it crash the browser or the tab? Under Chrome's architecture, a page should potentially be able to crash the tab, but not the browser. (or that's my understanding of it, anyway)
[ Parent | on HN ]