← Back to team overview

desktop-packages team mailing list archive

[Bug 891707] [NEW] java webstart creates infinite open windows, desktop DoS

 

Public bug reported:

To recreate the issue, use this sample JNLP site:
http://pscode.org/jws/api.html

click and run "basic service demo" from the browser.

A series of new windows will open, blank, one after the other,
with no end in sight.

It's so bad I had to switch to a tty and killall -9 firefox.

The behavior is the same if you were to download the jnlp instead
and use "gnome-open basicserv.jnlp".

However, if I were to use 'javaws basicserv.jnlp', the service
spawns just fine. If I change firefox to call javaws directly, it
also works just fine. This leads me to believe that there's a bug
in the mime handling for JNLP.

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: firefox 7.0.1+build1+nobinonly-0ubuntu2
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Uname: Linux 3.0.0-12-generic x86_64
AddonCompatCheckDisabled: False
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24.
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
ArecordDevices:
 **** List of CAPTURE Hardware Devices ****
 card 0: Intel [HDA Intel], device 0: CONEXANT Analog [CONEXANT Analog]
   Subdevices: 1/1
   Subdevice #0: subdevice #0
AudioDevicesInUse:
 USER        PID ACCESS COMMAND
 /dev/snd/controlC0:  ppetraki   1795 F.... pulseaudio
BuildID: 20111008085652
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info:
 Card hw:0 'Intel'/'HDA Intel at 0xf2620000 irq 45'
   Mixer name	: 'Intel IbexPeak HDMI'
   Components	: 'HDA:14f15069,17aa218b,00100301 HDA:80862804,17aa21b5,00100000'
   Controls      : 13
   Simple ctrls  : 7
Card29.Amixer.info:
 Card hw:29 'ThinkPadEC'/'ThinkPad Console Audio Control at EC reg 0x30, fw 6MHT35WW-1.10'
   Mixer name	: 'ThinkPad EC 6MHT35WW-1.10'
   Components	: ''
   Controls      : 1
   Simple ctrls  : 1
Card29.Amixer.values:
 Simple mixer control 'Console',0
   Capabilities: pswitch pswitch-joined penum
   Playback channels: Mono
   Mono: Playback [on]
Channel: release
Date: Thu Nov 17 11:51:11 2011
ForcedLayersAccel: False
IfupdownConfig:
 auto lo
 iface lo inet loopback
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
Profiles: Profile0 (Default) - LastVersion=7.0.1/20111008085652
RunningIncompatibleAddons: False
SourcePackage: firefox
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 04/21/2010
dmi.bios.vendor: LENOVO
dmi.bios.version: 6MET55WW (1.18 )
dmi.board.name: 4313CTO
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr6MET55WW(1.18):bd04/21/2010:svnLENOVO:pn4313CTO:pvrThinkPadT510:rvnLENOVO:rn4313CTO:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 4313CTO
dmi.product.version: ThinkPad T510
dmi.sys.vendor: LENOVO

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: Confirmed


** Tags: amd64 apport-bug oneiric running-unity

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/891707

Title:
  java webstart creates infinite open windows, desktop DoS

Status in “firefox” package in Ubuntu:
  Confirmed

Bug description:
  To recreate the issue, use this sample JNLP site:
  http://pscode.org/jws/api.html

  click and run "basic service demo" from the browser.

  A series of new windows will open, blank, one after the other,
  with no end in sight.

  It's so bad I had to switch to a tty and killall -9 firefox.

  The behavior is the same if you were to download the jnlp instead
  and use "gnome-open basicserv.jnlp".

  However, if I were to use 'javaws basicserv.jnlp', the service
  spawns just fine. If I change firefox to call javaws directly, it
  also works just fine. This leads me to believe that there's a bug
  in the mime handling for JNLP.

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: firefox 7.0.1+build1+nobinonly-0ubuntu2
  ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
  Uname: Linux 3.0.0-12-generic x86_64
  AddonCompatCheckDisabled: False
  AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24.
  ApportVersion: 1.23-0ubuntu4
  Architecture: amd64
  ArecordDevices:
   **** List of CAPTURE Hardware Devices ****
   card 0: Intel [HDA Intel], device 0: CONEXANT Analog [CONEXANT Analog]
     Subdevices: 1/1
     Subdevice #0: subdevice #0
  AudioDevicesInUse:
   USER        PID ACCESS COMMAND
   /dev/snd/controlC0:  ppetraki   1795 F.... pulseaudio
  BuildID: 20111008085652
  CRDA: Error: [Errno 2] No such file or directory
  Card0.Amixer.info:
   Card hw:0 'Intel'/'HDA Intel at 0xf2620000 irq 45'
     Mixer name	: 'Intel IbexPeak HDMI'
     Components	: 'HDA:14f15069,17aa218b,00100301 HDA:80862804,17aa21b5,00100000'
     Controls      : 13
     Simple ctrls  : 7
  Card29.Amixer.info:
   Card hw:29 'ThinkPadEC'/'ThinkPad Console Audio Control at EC reg 0x30, fw 6MHT35WW-1.10'
     Mixer name	: 'ThinkPad EC 6MHT35WW-1.10'
     Components	: ''
     Controls      : 1
     Simple ctrls  : 1
  Card29.Amixer.values:
   Simple mixer control 'Console',0
     Capabilities: pswitch pswitch-joined penum
     Playback channels: Mono
     Mono: Playback [on]
  Channel: release
  Date: Thu Nov 17 11:51:11 2011
  ForcedLayersAccel: False
  IfupdownConfig:
   auto lo
   iface lo inet loopback
  InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
  ProcEnviron:
   PATH=(custom, user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  Profiles: Profile0 (Default) - LastVersion=7.0.1/20111008085652
  RunningIncompatibleAddons: False
  SourcePackage: firefox
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 04/21/2010
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 6MET55WW (1.18 )
  dmi.board.name: 4313CTO
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: dmi:bvnLENOVO:bvr6MET55WW(1.18):bd04/21/2010:svnLENOVO:pn4313CTO:pvrThinkPadT510:rvnLENOVO:rn4313CTO:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 4313CTO
  dmi.product.version: ThinkPad T510
  dmi.sys.vendor: LENOVO

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/891707/+subscriptions


Follow ups

References