Re: [Full-disclosure] Internet Explorer Crash

["Michele Cicciotti" <mc@xxxxxxxxxx>]

> There should be an implimentation on ALL browsers that a loop such
> large is
> unacceptable and refuse to even run it. There is no viable reason for a
> client-side to run a loop through so many itterations.

It's an unsolvable problem in computer science: a program (the browser) cannot 
calculate exactly how long another program (the script) will execute except by 
executing it... thus running at least as long as the latter. Proven 
mathematically, inescapable fact. The PoC at hand only demonstrates the easiest 
case, but there are infinitely more possible ones. The only safe way out is a 
timeout, like Internet Explorer (or PHP on the server side) implements

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/