Opened 4 years ago

Last modified 21 months ago

#16027 needs_information defect


Reported by: ariccio Owned by: tbb-team
Priority: Medium Milestone: Tor: unspecified
Component: Core Tor/Tor Version:
Severity: Normal Keywords: Application Verifier, WSA_NOT_INITIALIZED
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


I just downloaded Tor Browser, enabled all checks in Application Verifier, and Tried to launch the browser.


Do you guys even test with Application Verifier?

You can find a similar problem (and its solution) in this chromium issue:

Where can I find a debug build? Also: what's up with the tor.exe timestamp??!?

WinDbg output:

Microsoft (R) Windows Debugger Version 6.3.9600.17200 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\Alexander Riccio\AppData\Local\CrashDumps\tor.exe.42668.dmp]
User Mini Dump File with Full Memory: Only application data is available

************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\SymCache*
Deferred                                       SRV*c:\code\symbols*http://chromium-
Deferred                                       SRV*C:\SymCache*
Symbol search path is: SRV*c:\SymCache*;SRV*c:\code\symbols*http://chromium-;SRV*C:\SymCache*
Executable search path is: 
Windows 8 Version 9600 MP (8 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Built by: 6.3.9600.17031 (winblue_gdr.140221-1952)
Machine Name:
Debug session time: Thu May 14 18:14:50.000 2015 (UTC - 4:00)
System Uptime: 2 days 19:30:32.568
Process Uptime: 0 days 0:00:29.000
Loading unloaded module list
This dump file has a breakpoint exception stored in it.
The stored exception information can be accessed via .ecxr.
eax=00000000 ebx=00000000 ecx=000001a1 edx=00000000 esi=00000000 edi=07460000
eip=7704ca2c esp=00aee9f8 ebp=00aeee58 iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
7704ca2c c21400          ret     14h
*** WARNING: Unable to verify timestamp for libevent-2-0-5.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for libevent-2-0-5.dll - 
*** ERROR: Module load completed but symbols could not be loaded for tor.exe
0:000> !analyze -v
ERROR: FindPlugIns 8007007b
ERROR: Some plugins may not be available [8007007b]
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *

A Winsock API was called before a successful WSAStartup() or after a balancing successful WSACleanup() call was made
A call was made to a networking API before a successful WSAStarup() or after a balancing successful WSACleanup() call. WSAStartup is required to provide a reference count by any component using Winsock to guarantee initialization for Winsock API usage. An unbalance WSAStartup/WSACleanup call pattern by a component can lead to undefined behavior as this can cause the Winsock layer to unload libraries and release resources while still being used. 
Arg1: 00000000, Last sucessfull WSAStartup call by this caller. Use dps to dump the stack if not NULL 
Arg2: 00000000, Last sucessfull WSACleanup call by this caller. Use dps to dump the stack if not NULL 
Arg3: 0726253c, Last successful WSAStartup call in this process. Use dps to dump the stack if not NULL 
Arg4: 00000000, Last sucessfull WSACleanup call in this process. Use dps to dump the stack if not NULL 
SYMSRV:  c:\code\symbols*http://chromium- needs a downstream store

68493466 cc              int     3

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 68493466 (vrfcore!VerifierStopMessageEx+0x00000571)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 00000000

CONTEXT:  00000000 -- (.cxr 0x0;r)
eax=00000000 ebx=00000000 ecx=000001a1 edx=00000000 esi=00000000 edi=07460000
eip=7704ca2c esp=00aee9f8 ebp=00aeee58 iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
7704ca2c c21400          ret     14h


PROCESS_NAME:  tor.exe

ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION}  Breakpoint  A breakpoint has been reached.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid




APP:  tor.exe

ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre




LAST_CONTROL_TRANSFER:  from 6855227e to 68493466

00aef688 6855227e 68559588 0000e107 00000000 vrfcore!VerifierStopMessageEx+0x571
00aef6c0 685523a9 00000000 756f4960 68551244 vfnet!NetTrackStartup::StopIfNotInitialized+0xe8
00aef6d4 68555909 649acd0e 646f99a0 0ad683b0 vfnet!NetWSAInitTracker::StopIfNotInitialized+0x31
00aef6e8 649acd0e 00000002 00000001 00000000 vfnet!VfHooksocket+0x28
WARNING: Stack unwind information not available. Following frames may be wrong.
00aef758 649acc4d 00000001 00000001 00000000 libevent_2_0_5!evutil_ersatz_socketpair+0xaf
00aef798 649b4bfe 00000001 00000001 00000000 libevent_2_0_5!evutil_socketpair+0x48
00aef7e8 649b0d71 0ae14a48 00000020 00000018 libevent_2_0_5!evsig_init+0x3c
00aef828 64992a78 0ae14a48 649d8de4 000000ff libevent_2_0_5!event_strlcpy+0x539
00aef878 0048b9de 0e277fe8 00000010 00000040 libevent_2_0_5!event_base_new_with_config+0x1ff
00aef8c8 00373731 00aef910 00000000 0000000c tor+0x15b9de
00aef928 003647d8 0ad696c0 0ad69864 6843a93b tor+0x43731
00aef9c8 0036385b 00000000 00aefaf4 00aefaf4 tor+0x347d8
00aefa28 0036dc2f 0ad696c0 00aefaf4 00aefaf4 tor+0x3385b
00aefab8 0036d675 0ad667b8 0ad69540 00000000 tor+0x3dc2f
00aefb28 00336521 00000011 0ae17dd8 0049d14c tor+0x3d675
00aefca8 00338c77 00000011 0ae17dd8 00aefce8 tor+0x6521
00aefd08 0033159b 00000011 0ae17dd8 68440e82 tor+0x8c77
00aefd48 003313e2 00000011 0ae17dd8 0ae151d8 tor+0x159b
00aefe14 757a7c04 7f319000 757a7be0 f03de515 tor+0x13e2
00aefe28 7706ad1f 7f319000 f2a5bb16 00000000 kernel32!BaseThreadInitThunk+0x24
00aefe70 7706acea ffffffff 77050230 00000000 ntdll!__RtlUserThreadStart+0x2f
00aefe80 00000000 003314c0 7f319000 00000000 ntdll!_RtlUserThreadStart+0x1b

STACK_COMMAND:  ~0s; .ecxr ; kb

6855227e 83c420          add     esp,20h


SYMBOL_NAME:  vfnet!NetTrackStartup::StopIfNotInitialized+e8

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  vfnet.dll


FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_vfnet.dll!NetTrackStartup::StopIfNotInitialized

BUCKET_ID:  APPLICATION_FAULT_STATUS_BREAKPOINT_vfnet!NetTrackStartup::StopIfNotInitialized+e8


FAILURE_ID_HASH_STRING:  um:status_breakpoint_80000003_vfnet.dll!nettrackstartup::stopifnotinitialized

FAILURE_ID_HASH:  {1df460fb-da09-30ef-a645-25f2b731ebd6}

Followup: MachineOwner

0:000> dps 0726253c
0726253c  685534f5 vfnet!NetTrackStartup::AddStackTrace+0x34
07262540  68557808 vfnet!VfHookWSAStartup+0x4e
07262544  0045cd32 tor+0x12cd32
07262548  003364cb tor+0x64cb
0726254c  00338c77 tor+0x8c77
07262550  0033159b tor+0x159b
07262554  003313e2 tor+0x13e2
07262558  757a7c04 kernel32!BaseThreadInitThunk+0x24
0726255c  7706ad1f ntdll!__RtlUserThreadStart+0x2f
07262560  7706acea ntdll!_RtlUserThreadStart+0x1b
07262564  00000000
07262568  00000000
0726256c  00000000
07262570  00000000
07262574  00000000
07262578  00000000
0726257c  00000000
07262580  00000000
07262584  00000000
07262588  00000000
0726258c  00000000
07262590  00000000
07262594  00000000
07262598  00000000
0726259c  00000000
072625a0  00000000
072625a4  00000000
072625a8  00000000
072625ac  00000000
072625b0  00330000 tor
072625b4  00000000
072625b8  00000000
0:000> !lmi tor
Loaded Module Info: [tor] 
         Module: tor
   Base Address: 00330000
     Image Name: tor.exe
   Machine Type: 332 (I386)
     Time Stamp: 386d4380 Fri Dec 31 19:00:00 1999
           Size: 1fa000
       CheckSum: 1fa0d1
Characteristics: 30e stripped 
Debug Directories not present
    Symbol Type: NONE     - PDB not found from image header.
    Load Report: no symbols loaded
0:000> !lmi libevent_2_0_5
Loaded Module Info: [libevent_2_0_5] 
         Module: libevent-2-0-5
   Base Address: 64990000
     Image Name: libevent-2-0-5.dll
   Machine Type: 332 (I386)
     Time Stamp: 0 Wed Dec 31 19:00:00 1969
           Size: 82000
       CheckSum: bb909
Characteristics: 2106  
Debug Directories not present
     Image Type: MEMORY   - Image read successfully from symbol search path.
    Symbol Type: EXPORT   - PDB not found
    Load Report: export symbols
0:000> lm
start    end        module name
00330000 0052a000   tor        (no symbols)           
64660000 646d5000   libgcc_s_sjlj_1   (deferred)             
646e0000 64702000   zlib1      (deferred)             
64710000 6477f000   ssleay32   (deferred)             
64780000 6496d000   libeay32   (deferred)             
64970000 6498c000   libssp_0   (deferred)             
64990000 64a12000   libevent_2_0_5 T (export symbols)       libevent-2-0-5.dll
68430000 6848a000   vfbasics   (pdb symbols)          c:\symcache\vfbasics.pdb\0CCA0E2A612D403A8EBD5A2EDEF0D7831\vfbasics.pdb
68490000 684bf000   vrfcore    (pdb symbols)          c:\symcache\vrfcore.pdb\D7A4388A6616473E8CE20AC2B5A4F47D1\vrfcore.pdb
684c0000 684d7000   vfnws      (deferred)             
684e0000 68540000   verifier   (deferred)             
68550000 68563000   vfnet      (pdb symbols)          c:\symcache\vfNet.pdb\3D14FE4AD72642E89521056B661995E01\vfNet.pdb
73eb0000 73ece000   bcrypt     (deferred)             
73ed0000 73f00000   rsaenh     (deferred)             
73f00000 73f19000   cryptsp    (deferred)             
747a0000 747f4000   bcryptPrimitives   (deferred)             
74800000 7480a000   CRYPTBASE   (deferred)             
74810000 7482e000   sspicli    (deferred)             
74830000 74983000   user32     (pdb symbols)          c:\symcache\wuser32.pdb\FBAAE417246B4E84AE5BCEC86A73FC642\wuser32.pdb
74990000 74a4a000   rpcrt4     (deferred)             
74f60000 7506e000   gdi32      (deferred)             
75070000 75097000   imm32      (deferred)             
750a0000 7521d000   combase    (private pdb symbols)  c:\symcache\combase.pdb\B9684E7A2A1E43DCB0F9A0A9717CB1AB2\combase.pdb
75220000 75227000   nsi        (deferred)             
75230000 75307000   KERNELBASE   (deferred)             
75310000 75422000   msctf      (deferred)             
75430000 75471000   sechost    (deferred)             
75650000 756cc000   advapi32   (deferred)             
756f0000 75740000   ws2_32     (deferred)             
75740000 75785000   shlwapi    (deferred)             
75790000 758d0000   kernel32   (pdb symbols)          c:\symcache\wkernel32.pdb\DFB9F6A1661C482C87B4D0D454332CB81\wkernel32.pdb
75a90000 75b53000   msvcrt     (deferred)             
75b60000 76e0c000   shell32    (deferred)             
77010000 7717e000   ntdll      (pdb symbols)          c:\symcache\wntdll.pdb\E182E2B237094ABDAD81A763BD7498B82\wntdll.pdb

Unloaded modules:
739c0000 739d3000   NETAPI32.DLL
730a0000 730aa000   netutils.dll
73080000 7309d000   srvcli.dll
73060000 73071000   wkscli.dll
739c0000 739d3000   NETAPI32.DLL
730a0000 730aa000   netutils.dll
73080000 7309d000   srvcli.dll
73060000 73071000   wkscli.dll

Child Tickets

Change History (3)

comment:1 Changed 4 years ago by ariccio

Grr. File is too big (13 MB) to attach. Already compressed.

comment:2 Changed 2 years ago by cypherpunks

Component: Applications/Tor BrowserCore Tor/Tor
Severity: Normal
Status: newneeds_information

Please, test with the latest version.

comment:3 Changed 21 months ago by dgoulet

Milestone: Tor: unspecified

Missing milestone.

Note: See TracTickets for help on using tickets.