Live data from Hacker News

Do Not Type "File:///" in OS X

openradar.appspot.com

151–160 of 206 posts

Re: Do Not Type "File:///" in OS X

#152
post #145
post #136

Earlier quoted context omitted.

checkDataDetectors will extract 'File://a/' - or any other 'complete' file URL - which at a minimum is a schema (file://) and a path '/' - as a valid data URL and then pass it to DDResultCopyExtractURL, which does some additional sanity checking. There it validates it by asserting that the URL begins with 'file://', which it doesn't. It then converts to an NSInternalInconsistencyException which is what crashes the ap…

What do you mean "exploited"? It certainly can be exploited to cause a denial of service (like the one at this page: http://gironda.org/this_will_crash_safari.html ).

'exploit' is the term for getting a bug to run your own shellcode

Re: Do Not Type "File:///" in OS X

#153
post #55

Everything crashing: - Skype (type and right mouse click) - Sparrow (type and wait) - Chrome (address bar) - Safari (address bar) - Tweetbot - Twitter.app - Mac App Store (search bar) - Base (any textbox) - terminal (in the preferences screen) Not crashing: - SublimeText Pretty much each and every text box on the entire system.

Add Messages.app to that list, I discovered as I stupidly tried to explain how to repro it to someone..

I dare not try it, but having that text as status on Facebook could crash those viewing my status using Safaris?

Re: Do Not Type "File:///" in OS X

#154
post #149
post #142

Earlier quoted context omitted.

Mine is Swedish, and I am unable to reproduce it.

It crashes with Swedish layout on 10.8.2 when I type Ctrl + ¨ on my computer. (Alt+~+space seems to work, though)

Doesn't crash my Terminal.app. I use a swedish keyboard. Perhaps you could create a new clean account on your computer and try it there? You can always delete the account afterwards.

Re: Do Not Type "File:///" in OS X

#156
post #154
post #149

Earlier quoted context omitted.

It crashes with Swedish layout on 10.8.2 when I type Ctrl + ¨ on my computer. (Alt+~+space seems to work, though)

Doesn't crash my Terminal.app. I use a swedish keyboard. Perhaps you could create a new clean account on your computer and try it there? You can always delete the account afterwards.

Interesting. Must be some kind of pref setting or something that's surfacing the bug. Ugh, sounds hard to track down.

Re: Do Not Type "File:///" in OS X

#157
post #116

Earlier quoted context omitted.

Great. Now, can you say who ever said that it was voodoo ? I only see someone who said that it was safe to type it in a software, but I can be wrong.

> can you say who ever said that it was voodoo Listing every single app under the sun when it's completely obvious a common and widely used component (doesn't matter what's its name so really no need to know Cocoa and that it's probably NSTextView) is used is acknowledging it as voodoo.

No. It's being curious as to what you might be able to do with it. In my case, bricking Messages.app until they send themselves lots of messages.

Re: Do Not Type "File:///" in OS X

#158
post #125

I sent an iMessage (from iPhone) saying File:/// to my iMac and it crashed iMessage on the other end.. and now messages app crashes every time I try to launch! Also Sent myself an email (from the iPhone) with File:/// as the subject (and in the body for good measure). The Mail.app won't crash on the incoming email, but it won't open that message.

Send yourself 80 messages and it'll open again, then delete the conversation the File:/// is in.
Post reply on HN