OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: legitimate use of recursive document loading into IE4
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: legitimate use of recursive document loading into IE4

  • To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
  • Subject: Re: legitimate use of recursive document loading into IE4
  • From: Andrew Kennedy <adkPRESENCE-IT.CO.UK>
  • Date: Fri, 20 Mar 1998 23:23:02 +0000
  • Comments: To: ezines <ezinesSLEEPI.DEMON.CO.UK>
  • Organization: Presence Information Technology Limited
  • Reply-To: Andrew Kennedy <adkPRESENCE-IT.CO.UK>
  • Sender: Windows NT BugTraq Mailing List <NTBUGTRAQLISTSERV.NTBUGTRAQ.COM>
ezines wrote:
>
> [in reference to recursive bug in IE4]
>
> >Seems to me that these are just obvious coding bugs that do not detect a
> >recursive case without an exit. I wonder if it is possible to write a
> >useful web page using this technique,
>
> I think so, if you were using javascript. 2 or more Documents could be
> combined into one, and the different parts could be displayed using
> 'document.write()'s to form the different parts of the page depending on
> what the page's parent URL, or frame name, etc. was.
>
> > calling one's self, or if all such
> >cases are bogus. If this is a useful programming technique, then it
> >would be very difficult to detect a non-function exit clause and most
> >probably IE would have to limit the depth of recursion to solve this
> >problem.
>
> Maybe if the recursion case was looked for only after the document had
> been completely loaded (i.e. after the javascript had been executed).

i think this bug might turn out to be un-fixable - i believe it's known
as the halting problem in computer science circles - it's not possible
to tell whether a given (JavaScript) program will ever terminate, so you
can't ever catch all possible recursive nastiness that can be put into
a web page. the only thing to do is to make sure IE handles running out
of memory gracefully.

&rew.
--
        andrew kennedy : adkpresence-it.co.uk
        presence IT limited : death before unconciousness