Opened 3 years ago

Closed 3 years ago

#17567 closed defect (wontfix)

Crash when using mozmill on tor browser 5.5a4-hardened

Reported by: boklm Owned by: boklm
Priority: Very High Milestone:
Component: Applications/Quality Assurance and Testing Version:
Severity: Normal Keywords: tbb-hardened, TorBrowserTeam201512
Cc: tbb-team, gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

When running mozmill tests on 5.5a4-hardened, it is failing with the following error:

1447094953300   addons.xpi-utils        ERROR   Unable to read anything useful from the database
=================================================================
==12494==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000155358 at pc 0x7f895e26fa9d bp 0x7fffb61e7d10 sp 0x7fffb61e7d08
READ of size 4 at 0x602000155358 thread T0
ASAN:SIGSEGV
==12494==AddressSanitizer: while reporting a bug found another one. Ignoring.
TEST-UNEXPECTED-FAIL | Disconnect Error: Application unexpectedly closed
RESULTS | Passed: 0
RESULTS | Failed: 0
RESULTS | Skipped: 0

Child Tickets

Attachments (1)

mozmill_asan_crash (12.2 KB) - added by gk 3 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 Changed 3 years ago by boklm

Keywords: TorBrowserTeam201511 tbb-hardened added

comment:2 Changed 3 years ago by gk

Cc: gk added

comment:3 Changed 3 years ago by boklm

Here are some commands you can use to reproduce the error:

tbbdir=/tmp/tbb-hardened
mkdir $tbbdir
tar -C $tbbdir -xf tor-browser-linux64-5.5a4-hardened_ALL.tar.xz
cat > $tbbdir/tbb-wrapper <<EOF
#!/bin/sh
export LD_LIBRARY_PATH="$tbbdir/tor-browser/Browser:$tbbdir/tor-browser/Browser/TorBrowser/Tor"
exec $tbbdir/tor-browser/Browser/firefox "\$@"
EOF
chmod +x $tbbdir/tbb-wrapper
cd /tmp
git clone https://git.torproject.org/boklm/tor-browser-bundle-testsuite.git
cd tor-browser-bundle-testsuite
./setup-virtualenv
export TOR_SKIP_LAUNCH=1
./virtualenv/bin/mozmill -b $tbbdir/tbb-wrapper -p $tbbdir/tor-browser/Browser/TorBrowser/Data/Browser/profile.default -t ./mozmill-tests/tbb-tests/searchengines.js

comment:4 Changed 3 years ago by gk

Attached is a stacktrace which I am not happy about but which might be a first start.

Changed 3 years ago by gk

Attachment: mozmill_asan_crash added

comment:5 Changed 3 years ago by gk

Priority: MediumVery High

I can see this issue with a custom mozilla-central build, too. I'll file a Mozilla bug shortly.

comment:7 Changed 3 years ago by mikeperry

Keywords: TorBrowserTeam201512 added; TorBrowserTeam201511 removed

comment:8 Changed 3 years ago by gk

Resolution: wontfix
Status: newclosed

This is a bug in Mozmill which we address with #16009.

Note: See TracTickets for help on using tickets.