malformed /oversize favicon.ico causes segfault

Bug #1618658 reported by trogs2008
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
midori (Ubuntu)
New
Undecided
Unassigned

Bug Description

If I place a large favicon.ico on a local server, and then browse to the local site with Midori, I'll be greeted with the webpage, and then a short time later a segfault.

Should be fairly easy to reproduce - set up Apache on localhost and create a random favicon.ico -
I used a 1.6GB file

cd /var/www/html/
dd if=/dev/urandom of=favicon.ico bs=1024 count=1600000

Browse to http://localhost and you should get a segfault.

Suggest limiting the size of favicon.ico that will be grabbed to a very small size - <100KB would be fine, considering most favicon are < 10KB in size anyhow, there's really no reason to be grabbing a large favicon from a remote site.

This is using latest Ubuntu 16.04.1 LTS , Midori 0.5.11-ds1-2

Cheers,
Blair

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.