From: ab411@detroit.freenet.org (David R. Conrad)
Date: Fri, 22 Sep 95 10:24:42 PDT
To: cypherpunks@toad.com
Subject: Re: Another Netscape Bug (and possible security hole)
Message-ID: <199509221724.NAA18084@detroit.freenet.org>
MIME-Version: 1.0
Content-Type: text/plain




-----BEGIN PGP SIGNED MESSAGE-----

Jeff Weinstein <jsw@neon.netscape.com> writes:

>   Not that I want to divert attention away from netscape(OK, maybe I
> do :-) ), but does this bug exist in any other common browser?

Lynx can handle it on the info page (reached by pressing '='), but:

In response to selecting the long domain name found in the Warning link in
http://www.grfn.org/~conrad/test.shtml, lynx replied:

- - -

Sorry, you have encountered a bug in Lynx Ver. 2-4-2

Please send a concise mail message to
lynx-bug@ukanaix.cc.ukans.edu describing what you were doing,
the URL you were looking at or attempting to access,
your operating system name with version number,
the TCP/IP implementation that your system is using,
and any other information you deem relevant.

Do not mail the core file if one was generated.

Lynx now exiting with signal:  11


Exiting via interrupt: exit(0)

- - -

[No core file was generated]

My system is: (uname -a)

Linux russell 1.3.26 #2 Thu Sep 14 08:34:38 EDT 1995 i486

Netscape 1.1N for linux crashed in a way that locked my system up, and
caused endless trashing.  I had to reboot, but my filesystem was
undamaged.  Not sure why it crashed and burned on my system while others
have gotten such nice SegVs and core files.  I guess I managed to get
just the right (wrong) thing onto the stack.  :-)  :-(

(P.S. Whoops, just realized that I rebooted with a different kernel;
Lynx did indeed crash under 1.3.26 (post-reboot), but Netscape crashed
under 1.2.13 (pre-reboot).  Pardon me if I don't re-try under 1.3.26,
but having X lock up and hearing my disk trash is not something I relish.)

drc

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMGLu1BEcrOJethBVAQEhwwP/cPZ2Gr/MClaywXEAtagNa7n5IyIsqFGI
LmCDxjTMdK/zXzuPcU3Xa53QxOn4dSxQv2PRKHrLGSrVn5vvZHRiYmH5z4NgWvmJ
ETFlFascANzqN2VbHgrn80u3RlFIH0UAUiTgoIFiJ4E3TUzrmt5w4qeXxvfA9PKQ
LQi2oeIArS8=
=EEup
-----END PGP SIGNATURE-----

Last line above should read: "hearing my disk *thrash* ...," not trash.
Signing messages is non-trivial with my current set up, so I don't feel
like re-doing it for such a minor glitch.

--
David R. Conrad, conrad@detroit.freenet.org, http://www.grfn.org/~conrad
Hardware & Software Committee  --  Finger conrad@grfn.org for public key
Key fingerprint =  33 12 BC 77 48 81 99 A5  D8 9C 43 16 3C 37 0B 50
No, his mind is not for rent to any god or government.