tbb-firefox.exe crashes on startup

Whenever I start tbb-firefox.exe (whether through Vidalia or the .exe itself), it instantly crashes and prompts me with "tbb-firefox.exe has stopped working". This didn't happen in previous releases.

AppName: tbb-firefox.exe AppVer: 17.0.10.5051 ModName: nspr4.dll ModVer: 4.9.5.0 Offset: 000012b2

I'm running on a WinXP and can give more information (e.g. DxDiag) if necessary.

Trac:
Username: Lehona

changed milestone to %TorBrowserBundle 2.3.x-stable

added component::applications/tor browser milestone::TorBrowserBundle 2.3.x-stable needs-triage owner::erinn priority::medium reporter::Lehona resolution::user disappeared severity::normal status::closed tbb-crash type::defect labels

I'm running on a WinXP and can give more information (e.g. DxDiag) if necessary.

Post everything you can get. It could help.

Just tested tbb-firefox.exe from tor-browser-2.3.25-14_en-US.exe (with verified signature) for some random WinXP. Working just fine.

Did you tested your hardware, software? Maybe some problems there.

Trac:
Owner: N/A to erinn
Component: - Select a component to Tor bundles/installation
Priority: major to normal

My DxDiag.

I just confirmed that I can run the latest version of firefox just fine, but from what I understand that isn't the version included in the TBB anyway. If someone can point me to a download of the (unpatched?) version that TBB is using I can try that, too.

I tried both tor-browser-2.3.25-14_en-US.exe and tor-browser-2.3.25-14_de.exe multiple times without success.

I updated my graphics driver because Mozilla had something in their FAQs about old drivers causing potential crashes, but it didn't help. Any other things I should specifically looking out for?

Trac:
Username: Lehona

Offset: 000012b2

It's PR_NewTCPSocketPair, just entry point of it, which called by PR_NewPollableEvent. Not so much information to get why crashed. Need to know exception code, usually windows reports it for terminated apps.

http://pastebin.com/y5KZLAdS

There's more technical information but I can't seem to copy that out of the error message... The exception code is 0xc0000005 though. Problems with RAM, for all I remember, but that happens even after rebooting my computer.

Trac:
Username: Lehona

Can you try to run previous releases of TBB again for test? What antivirus used? Can you turn it off for test?

If someone can point me to a download of the (unpatched?) version that TBB is using I can try that, too.

It's firefox 17.0.10. Official Firefox binaries builded using another compiler (MSVC), so with the same source code it can lead to different bugs if any exist. But you can to try 17.0.10esr (en-US)

No antivirus was ever enabled when I tried to start TBB.

tor-browser-2.2.32-2_en-US.exe does not crash, while tor-browser-2.3.25-5_en-US.exe does crash.

tor-browser-2.3.25-8_en-US.exe works fine and is the latest version I was able to download from the archives.

Firefox 17.0.10esr works fine.

Trac:
Username: Lehona

What about TBB3? TBB3.0b1_en-US

All archive versions of TBB can be found at Tor browser package archive

All archive versions of TBB can be found

Not all sorry.

the latest version I was able to download from the archives You're right.

When I tried TBB3.0b1_en-US, tor.exe crashed and I seemed to be unable to get any logs from it, even when editing the torrc. I was unable to start any of the 3.0 alphas, but I guess they're called 'alpha' for a reason.

Trac:
Username: Lehona

Something in your box actively modifies code of functions in memory (or files). That reminds API hooking.

Here affected code:

12AD:  E92E450200 ;PR_OpenTCPSocket
12B2:  E969450200 ;PR_NewTCPSocketPair ;Crash here!

PR_OpenTCPSocket of nspr4.dll is known as usual target for hooking by various malware/software. Usually it replaces a prologue of target function with the JMP rel32 (E9 opcode) so code of next function shouldn't to be affected, except this case it seems. If JMP d,[addr] (FF25 opcode, 6 bytes) or something another used then code at 12B2 was modified and crash as result.

Browser from tor-browser-2.3.25-8_en-US.exe was compiled with optimizations so code of PR_OpenTCPSocket looks like:

4952: 6A01
4954: 6A02
4956: E815FFFFFF
495B: 83C40C
495E: C3

Enough space for any JMPs there, no another functions modified and no crash.

No more reasonable explanations. Your box infected or some very weird software used.

Trac:
Keywords: N/A deleted, needs-triage added

Lehona, are you still having this problem?

Trac:
Status: new to needs_information
Component: Tor bundles/installation to Tor Browser

Maybe try disabling hardware acceleration. Go to the Options menu, then click the Advanced tab. Uncheck the box that says "Use hardware acceleration, when available". I had the same issue with an older TBB (can't remember which one), and doing this fixed it. I haven't tested 2.3. On 4.0.2, this is still a problem, but that could be a separate bug. I'm on Windows 7 64-bit.

--New cypherpunk, commenting on this ticket for the first time

Trac:
Username: cypherpunks_backup
Severity: N/A to Normal
Sponsor: N/A to N/A
Keywords: N/A deleted, tbb-crash added

Trac:
Status: needs_information to closed
Resolution: N/A to user disappeared

closed

moved to tpo/applications/tor-browser#10114 (closed)