Package: netsurf Version: 1.1-2 Severity: important Tags: security Hi, it seems to be possible to crash netsurf by triggering an assert if in render/layout.c:
503 assert(0 <= block->min_width && block->min_width <= block->max_width); This seems to work for all html tags that have a width attribute (BOX_BLOCK, BOX_INLINE_BLOCK, BOX_TABLE_CELL). Proof of concept: http://nion.modprobe.de/test.html Kind regards Nico
pgppcFd1pOHyM.pgp
Description: PGP signature
