Text String Takes Bite Out of Apple

Tuesday, September 3, 2013 @ 05:09 PM gHale


A string of Arabic text is crashing apps or Safari browser sessions.

Whether it is with iOS or Mac OS X users, the string sequence — whether in a tweet, webpage, or a SMS message – will crash apps or browser sessions.

The problem traced back to the Apple Core Text technology which handles page layout and font rendering and has been available since OS X v10.5 and iOS 3.2.

RELATED STORIES
Still a Hack, but Wrong Person
‘Jekyll’ Test Attack Takes Over
Apple Developer Site Back Up
Apple Hit by Developer Site Breach

From the online Apple programming guide: “The Core Text layout engine is designed specifically to make simple text layout operations easy to do and to avoid side effects. The Core Text font programming interface is complementary to the Core Text layout engine and is designed to handle Unicode fonts natively, unifying disparate OS X font facilities into a single comprehensive programming interface.”

A post on a Russian site, habrahabr.ru, said crashes are happening on Mac OS 10.8 and iOS 6; newer beta versions of both do not suffer from the issue, the site said. The post also confirmed that SMS message, iMessages, and opening pages using Safari on iOS or OS X will crash the browser. It also said that renaming a Wi-Fi SSID with the text string will also result in errors while scanning for networks.

The site also said Apple has known about the bug for six months. Apparently until yesterday, the string had been limited to the Russian site, but it’s quickly spread via social media and is now causing some denial-of-service crashes as Twitter apps, browsers and SMS clients crash. Facebook, meanwhile, has already taken steps to block the code from wall posts and timelines.



Leave a Reply

You must be logged in to post a comment.