Opened 6 years ago

Closed 12 months ago

#10114 closed defect (user disappeared)

tbb-firefox.exe crashes on startup

Reported by: Lehona Owned by: erinn
Priority: Medium Milestone: TorBrowserBundle 2.3.x-stable
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-crash, needs-triage
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Whenever I start tbb-firefox.exe (whether through Vidalia or the .exe itself), it instantly crashes and prompts me with "tbb-firefox.exe has stopped working". This didn't happen in previous releases.

AppName: tbb-firefox.exe AppVer: 17.0.10.5051 ModName: nspr4.dll
ModVer: 4.9.5.0 Offset: 000012b2

I'm running on a WinXP and can give more information (e.g. DxDiag) if necessary.

Child Tickets

Change History (15)

comment:1 Changed 6 years ago by cypherpunks

Component: - Select a componentTor bundles/installation
Owner: set to erinn
Priority: majornormal

I'm running on a WinXP and can give more information (e.g. DxDiag) if necessary.

Post everything you can get. It could help.

Just tested tbb-firefox.exe from tor-browser-2.3.25-14_en-US.exe (with verified signature) for some random WinXP. Working just fine.

Did you tested your hardware, software? Maybe some problems there.

comment:2 Changed 6 years ago by Lehona

My DxDiag.

I just confirmed that I can run the latest version of firefox just fine, but from what I understand that isn't the version included in the TBB anyway. If someone can point me to a download of the (unpatched?) version that TBB is using I can try that, too.

I tried both tor-browser-2.3.25-14_en-US.exe and tor-browser-2.3.25-14_de.exe multiple times without success.

I updated my graphics driver because Mozilla had something in their FAQs about old drivers causing potential crashes, but it didn't help. Any other things I should specifically looking out for?

comment:3 in reply to:  description Changed 6 years ago by cypherpunks

Offset: 000012b2

It's PR_NewTCPSocketPair, just entry point of it, which called by PR_NewPollableEvent. Not so much information to get why crashed. Need to know exception code, usually windows reports it for terminated apps.

comment:4 Changed 6 years ago by Lehona

http://pastebin.com/y5KZLAdS

There's more technical information but I can't seem to copy that out of the error message... The exception code is 0xc0000005 though. Problems with RAM, for all I remember, but that happens even after rebooting my computer.

comment:5 Changed 6 years ago by cypherpunks

Can you try to run previous releases of TBB again for test?
What antivirus used? Can you turn it off for test?

If someone can point me to a download of the (unpatched?) version that TBB is using I can try that, too.

It's firefox 17.0.10. Official Firefox binaries builded using another compiler (MSVC), so with the same source code it can lead to different bugs if any exist. But you can to try 17.0.10esr (en-US)

comment:6 Changed 6 years ago by Lehona

No antivirus was ever enabled when I tried to start TBB.

tor-browser-2.2.32-2_en-US.exe does not crash, while tor-browser-2.3.25-5_en-US.exe does crash.

tor-browser-2.3.25-8_en-US.exe works fine and is the latest version I was able to download from the archives.

Firefox 17.0.10esr works fine.

comment:7 Changed 6 years ago by cypherpunks

What about TBB3?
TBB3.0b1_en-US

All archive versions of TBB can be found at Tor browser package archive

comment:8 Changed 6 years ago by cypherpunks

All archive versions of TBB can be found

Not all sorry.

the latest version I was able to download from the archives

You're right.

comment:9 Changed 6 years ago by Lehona

When I tried TBB3.0b1_en-US, tor.exe crashed and I seemed to be unable to get any logs from it, even when editing the torrc. I was unable to start any of the 3.0 alphas, but I guess they're called 'alpha' for a reason.

comment:10 in reply to:  description Changed 6 years ago by cypherpunks

Something in your box actively modifies code of functions in memory (or files). That reminds API hooking.

Here affected code:

12AD:  E92E450200 ;PR_OpenTCPSocket
12B2:  E969450200 ;PR_NewTCPSocketPair ;Crash here!

PR_OpenTCPSocket of nspr4.dll is known as usual target for hooking by various malware/software. Usually it replaces a prologue of target function with the JMP rel32 (E9 opcode) so code of next function shouldn't to be affected, except this case it seems. If JMP d,[addr] (FF25 opcode, 6 bytes) or something another used then code at 12B2 was modified and crash as result.

Browser from tor-browser-2.3.25-8_en-US.exe was compiled with optimizations so code of PR_OpenTCPSocket looks like:

4952: 6A01
4954: 6A02
4956: E815FFFFFF
495B: 83C40C
495E: C3

Enough space for any JMPs there, no another functions modified and no crash.

No more reasonable explanations. Your box infected or some very weird software used.

Last edited 6 years ago by cypherpunks (previous) (diff)

comment:11 Changed 5 years ago by erinn

Keywords: needs-triage added

comment:12 Changed 5 years ago by erinn

Component: Tor bundles/installationTor Browser
Status: newneeds_information

Lehona, are you still having this problem?

comment:13 Changed 4 years ago by cypherpunks

Maybe try disabling hardware acceleration. Go to the Options menu, then click the Advanced tab. Uncheck the box that says "Use hardware acceleration, when available". I had the same issue with an older TBB (can't remember which one), and doing this fixed it. I haven't tested 2.3. On 4.0.2, this is still a problem, but that could be a separate bug. I'm on Windows 7 64-bit.

--New cypherpunk, commenting on this ticket for the first time

Last edited 4 years ago by cypherpunks (previous) (diff)

comment:14 Changed 3 years ago by cypherpunks_backup

Keywords: tbb-crash added
Severity: Normal

comment:15 Changed 12 months ago by gk

Resolution: user disappeared
Status: needs_informationclosed
Note: See TracTickets for help on using tickets.