[tbb-bugs] #21232 [Applications/Tor Browser]: Crashes when visiting URL with test gifs

[Tor Bug Tracker & Wiki]

#21232: Crashes when visiting URL with test gifs
------------------------------------------+-----------------------
     Reporter:  DqZYF                     |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  High                      |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Major                     |   Keywords:  gif image
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+-----------------------
 Version 6.0.8-1 freezes my complete system for ~15 seconds and uses all of
 my 16Gb RAM and ~1 Gb Swap, uses 2-3 cores on 100%. Tor Browser then
 crashes, after which everything returns to normal. If I start Tor Browser
 again, I get the option to restore tabs (including the last opened one,
 with the evil url). Everything functions normally again.
 This is the URL:

 http://lcamtuf.coredump.cx/afl/demo/gif/full/

 I am able to reproduce this on my system consistently.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21232>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online