Issue 60 - nativeclient - Browser Plugin NPAPI InvokeDefault Stack Overflow

Issue 60:	Browser Plugin NPAPI InvokeDefault Stack Overflow	‹ Prev 5 of 92 Next ›
	4 people starred this issue and may be notified of changes.	Back to list

Status:	Accepted
Owner:	s...@google.com
Security-Contest
Type-Defect

Reported by ben.haw...@paradise.net.nz, Mar 12, 2009

Team: Beached As

A stack overflow exists in the NPAPI browser plugin's scripting capability,  
specifically NPObjectProxy's InvokeDefault method when handling conversion 
between different ABIs. It can be triggered on Windows systems by supplying 
a large number of arguments to the default method for the NaCl NPAPI plugin 
(greater than 256 to cause corruption).

npapi_invoke2.zip
166 KB Download

Comment 1 by nativeclient.admin, Apr 01, 2009

(No comment was entered for this change.)

Owner: s...@google.com

Comment 2 by nativeclient.admin, Apr 06, 2009

Verified as an issue.

Labels: Type-Defect

Comment 3 by nativeclient.admin, Apr 10, 2009

(No comment was entered for this change.)

Status: Accepted

Comment 4 by bradnel...@google.com, Dec 03, 2009

(No comment was entered for this change.)

Owner: s...@google.com