Live data from Hacker News

Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

bugs.chromium.org

31–40 of 86 posts

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#31
post #7

On XiaoMi phones at least, this is a system app (see: bloatware). That means you can't clear its app data nor uninstall it, effectively bricking Chrome permanently. The only thing you can do is uninstall the updates, which force resets its persistence, losing all of your stored data/sessions. If you've already done that... tough luck, I guess? What an awful bug.

I did this and was so furious the phone was bricked i threw my phone out a train window.... Was i too soon?

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#32
post #31
post #7

On XiaoMi phones at least, this is a system app (see: bloatware). That means you can't clear its app data nor uninstall it, effectively bricking Chrome permanently. The only thing you can do is uninstall the updates, which force resets its persistence, losing all of your stored data/sessions. If you've already done that... tough luck, I guess? What an awful bug.

I did this and was so furious the phone was bricked i threw my phone out a train window.... Was i too soon?

What are you typing this on?

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#33
post #27

Earlier quoted context omitted.

Off Topic: I don't get it why, after 10 years of mobile browser development, there still is no "close all tabs at end" option. Every time I visit my parents, I have to clean up their 150+ open chrome android tabs because they don't understand how to properly clean up their browsing sessions. Why on earth would I want to open the same old tabs in the morning, that I already looked at the day before?

Because they are the tabs with your email, facebook, news, and and and.

Is it really necessary to permanently monitor these distractions? (rhetorical question)

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#36
post #9

Earlier quoted context omitted.

You realize "safe" languages don't protect you from all bugs, right? So tired of this narrative on HN.

But actual crashes are most likely due to memory unsafety; I’d be extremely surprised if the root cause was not found to be in a memory-unsafe language, though I doubt it’ll be in the URL parser.

That's a weak statement: isn't Chrome is almost entirely written in C++? I suppose you mean it's a memory overrun or use are free. You're probably right, then.

But in Rust, something like this could happen too, if someone added a panic!, e.g. on parsing a domain name with an empty component, or failure to put the domain name in a certain (external) structure. If the URL is parsed again on start-up, the application would be bricked. Granted, it's much easier to find and solve.

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#37
post #5

My bet is on url parser in unsafe language

My bet is URL parser with insufficient tests. It is well known that URLs are hard; nobody should ever trust their own implementation of a URL parser unless it is sufficiently tested (payload repositories exist for a reason).

And under circumstances testing the own url parser _alone_ is only half (?) of the story. The other URL parsers within the system or in the line need to be tested, too. Which mathematically might not be possible. So next to the URL parser it is likely practically to have an URL filter. And with it, a good test-suite, too.

(I don't do any bets thought, sorry)

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#38
post #7

On XiaoMi phones at least, this is a system app (see: bloatware). That means you can't clear its app data nor uninstall it, effectively bricking Chrome permanently. The only thing you can do is uninstall the updates, which force resets its persistence, losing all of your stored data/sessions. If you've already done that... tough luck, I guess? What an awful bug.

That's wrong. You can clear both cache and data of a system app on a typical Android device. You just can't uninstall it.

The base .apk is stored on a read-only system partition, so you can't completely get rid of it, but typically you should be able to remove all data of that app, clear its cache, uninstall any updates it downloaded (since those are stored on another partition), and also disable it.

I haven't used any OS by Xiaomi in a while, so I don't know if they changed anything about that.

Though I used to run their MIUI OS on my Samsung Galaxy (S2 or S5, I don't remember) for a while. That one was the opposite of locked down and even shipped pre-rooted, but it's been a long time.

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#39
post #7

On XiaoMi phones at least, this is a system app (see: bloatware). That means you can't clear its app data nor uninstall it, effectively bricking Chrome permanently. The only thing you can do is uninstall the updates, which force resets its persistence, losing all of your stored data/sessions. If you've already done that... tough luck, I guess? What an awful bug.

Tangential... does that smell like built in spying tweaks to anyone else?

Edit - quick googling says Xiaomi have their own browser as default / system, is that what you're referring to?

Re: Opening http://../foo on Android Chrome crashes the browser (Warning: or worse)

#40
post #9

Earlier quoted context omitted.

You realize "safe" languages don't protect you from all bugs, right? So tired of this narrative on HN.

But actual crashes are most likely due to memory unsafety; I’d be extremely surprised if the root cause was not found to be in a memory-unsafe language, though I doubt it’ll be in the URL parser.

an uncaught exceptions or an abort can kill an application even on a safe language.
Post reply on HN