Opened 4 years ago

Closed 4 years ago

#20181 closed defect (duplicate)

PK11_DigestFinal crash in Tor Browser on OSX

Reported by: cypherpunks Owned by:
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Major Keywords: tbb-crash
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The Tor Browser ( 6.0.2 ) keeps on crashing on MAC ox ( 10.11.6 ) i can't visit a site for more than 1 minutes before it crashes and have to restart

Process:               firefox [33279]
Path:                  /Applications/TorBrowser.app/Contents/MacOS/firefox
Identifier:            org.mozilla.tor browser
Version:               6.0.5 (4500.1.1)
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
Responsible:           firefox [33279]
User ID:               501

Date/Time:             2016-09-17 11:33:20.892 +0300
OS Version:            Mac OS X 10.11.6 (15G1004)
Report Version:        11
Anonymous UUID:        63DB85D8-C0CE-773F-D3B8-862DA5A752F9


Time Awake Since Boot: 150000 seconds

System Integrity Protection: enabled

Crashed Thread:        4  Socket Thread

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       EXC_I386_GPFLT
Exception Note:        EXC_CORPSE_NOTIFY

Thread 0:: Dispatch queue: com.apple.main-thread
0   XUL                           	0x00000001021276e7 0x101af7000 + 6489831

Thread 1:: Dispatch queue: com.apple.libdispatch-manager
0   libsystem_kernel.dylib        	0x00007fff9b105efa kevent_qos + 10
1   libdispatch.dylib             	0x00007fff8c846165 _dispatch_mgr_invoke + 216
2   libdispatch.dylib             	0x00007fff8c845dcd _dispatch_mgr_thread + 52

Thread 2:: Gecko_IOThread
0   libsystem_kernel.dylib        	0x00007fff9b105eca kevent + 10
1   XUL                           	0x0000000101dd95bc 0x101af7000 + 3024316

Thread 3:: Closing Service
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 4 Crashed:: Socket Thread
0   libnss3.dylib                 	0x00000001018224ad PK11_ExitContextMonitor + 14
1   libnss3.dylib                 	0x0000000101823398 PK11_DigestFinal + 264
2   XUL                           	0x0000000103a2d0e5 0x101af7000 + 32727269

Thread 5:: JS Helper
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 6:: JS Helper
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 7:: JS Helper
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 8:: JS Helper
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 9:: JS Helper
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 10:: JS Helper
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 11:
0   libsystem_kernel.dylib        	0x00007fff9b0fef72 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff9b0fe3b3 mach_msg + 55

Thread 12:: JS Watchdog
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767

Thread 13:: Hang Monitor
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 14:: Timer
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1dea3 PR_WaitCondVar + 227

Thread 15:: Cache2 I/O
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 16:
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 17:: Cert Verify
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 18:: RunProcess
0   libsystem_kernel.dylib        	0x00007fff9b105582 __wait4 + 10
1   XUL                           	0x0000000101b8fa0e 0x101af7000 + 625166

Thread 19:: Compositor
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   XUL                           	0x0000000101dc9bd8 0x101af7000 + 2960344
3   ???                           	0x8000000000000000 0 + 9223372036854775808

Thread 20:: ImageBridgeChild
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   XUL                           	0x0000000101dc9bd8 0x101af7000 + 2960344
3   ???                           	0x8000000000000000 0 + 9223372036854775808

Thread 21:: ImgDecoder #1
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 22:: ImgDecoder #2
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 23:: ImageIO
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 24:: IPDL Background
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 25:: DOM Worker
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 26:
0   libsystem_kernel.dylib        	0x00007fff9b0fef72 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff9b0fe3b3 mach_msg + 55

Thread 27:: com.apple.NSEventThread
0   libsystem_kernel.dylib        	0x00007fff9b0fef72 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff9b0fe3b3 mach_msg + 55
2   com.apple.CoreFoundation      	0x00007fff946d51c4 __CFRunLoopServiceMachPort + 212
3   com.apple.CoreFoundation      	0x00007fff946d468c __CFRunLoopRun + 1356
4   com.apple.CoreFoundation      	0x00007fff946d3ed8 CFRunLoopRunSpecific + 296
5   com.apple.AppKit              	0x00007fffa088ed95 _NSEventThread + 149
6   libsystem_pthread.dylib       	0x00007fff9925b99d _pthread_body + 131
7   libsystem_pthread.dylib       	0x00007fff9925b91a _pthread_start + 168
8   libsystem_pthread.dylib       	0x00007fff99259351 thread_start + 13

Thread 28:: mozStorage #1
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 29:: Proxy R~olution
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 30:: URL Classifier
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 31:: mozStorage #2
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 32:: Cache I/O
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 33:: mozStorage #3
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 34:: mozStorage #4
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 35:: localStorage DB
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 36:: mozStorage #5
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 37:: HTML5 Parser
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 38:: GMPThread
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 39:: DOM Worker
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 40:
0   libsystem_kernel.dylib        	0x00007fff9b0fef72 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff9b0fe3b3 mach_msg + 55

Thread 41:: mozStorage #6
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 42:
0   libsystem_kernel.dylib        	0x00007fff9b1055e2 __workq_kernreturn + 10
1   libsystem_pthread.dylib       	0x00007fff9925b578 _pthread_wqthread + 1283
2   libsystem_pthread.dylib       	0x00007fff99259341 start_wqthread + 13

Thread 43:
0   libsystem_kernel.dylib        	0x00007fff9b1055e2 __workq_kernreturn + 10
1   libsystem_pthread.dylib       	0x00007fff9925b578 _pthread_wqthread + 1283
2   libsystem_pthread.dylib       	0x00007fff99259341 start_wqthread + 13

Thread 44:: mozStorage #7
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 45:: DOM Worker
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767
2   libnss3.dylib                 	0x0000000101a1debd PR_WaitCondVar + 253

Thread 46:
0   libsystem_kernel.dylib        	0x00007fff9b0fef72 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff9b0fe3b3 mach_msg + 55

Thread 47:: SSL Cert #34
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767

Thread 48:
0   libsystem_kernel.dylib        	0x00007fff9b1055e2 __workq_kernreturn + 10
1   libsystem_pthread.dylib       	0x00007fff9925b578 _pthread_wqthread + 1283
2   libsystem_pthread.dylib       	0x00007fff99259341 start_wqthread + 13

Thread 49:: StreamTrans #36
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c728 _pthread_cond_wait + 767

Thread 50:: CVDisplayLink
0   libsystem_kernel.dylib        	0x00007fff9b104db6 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fff9925c75e _pthread_cond_wait + 821
2   com.apple.CoreVideo           	0x00007fff97ae20d8 CVDisplayLink::waitUntil(unsigned long long) + 232
3   com.apple.CoreVideo           	0x00007fff97ae1ed1 CVDisplayLink::runIOThread() + 511
4   com.apple.CoreVideo           	0x00007fff97ae19a9 startIOThread(void*) + 147
5   libsystem_pthread.dylib       	0x00007fff9925b99d _pthread_body + 131
6   libsystem_pthread.dylib       	0x00007fff9925b91a _pthread_start + 168
7   libsystem_pthread.dylib       	0x00007fff99259351 thread_start + 13

Thread 4 crashed with X86 Thread State (64-bit):
  rax: 0xe5e5e5e5e5e5e5e5  rbx: 0x00000000c1f30001  rcx: 0x0000000000000016  rdx: 0x0000000000000000
  rdi: 0x000000011b1f57f0  rsi: 0x0000000000080000  rbp: 0x0000700000227910  rsp: 0x0000700000227910
   r8: 0x0000000100501080   r9: 0x000000000000000e  r10: 0x0000000000000003  r11: 0xffffffff00000000
  r12: 0x0000000000000000  r13: 0x000000011b1f57f0  r14: 0x0000700000227964  r15: 0x0000700000227970
  rip: 0x00000001018224ad  rfl: 0x0000000000010282  cr2: 0x0000000110d37004
  
Logical CPU:     1
Error Code:      0x00000000
Trap Number:     13


Binary Images:
       0x100000000 -        0x100002ff7 +org.mozilla.tor browser (6.0.5 - 4500.1.1) <61E08098-8240-3EB0-AAC6-28020A015588> /Applications/TorBrowser.app/Contents/MacOS/firefox
       0x100005000 -        0x10001ffff +libmozglue.dylib (1) <1459E012-F2D7-3E00-A956-42D672918FC6> /Applications/TorBrowser.app/Contents/MacOS/libmozglue.dylib
       0x100057000 -        0x100058fff  libCyrillicConverter.dylib (68) <79F5CFEF-92E4-30FE-A650-41F07B6D31B9> /System/Library/CoreServices/Encodings/libCyrillicConverter.dylib
       0x100700000 -        0x10070afff +liblgpllibs.dylib (1) <80B7D584-849F-3F63-AF4B-BDA465ED524D> /Applications/TorBrowser.app/Contents/MacOS/liblgpllibs.dylib
...
    0x7fffa14ea000 -     0x7fffa14ebfff  libsystem_blocks.dylib (65) <1244D9D5-F6AA-35BB-B307-86851C24B8E5> /usr/lib/system/libsystem_blocks.dylib

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 7
    thread_create: 0
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 40428
    thread_create: 0
    thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=361.2M resident=0K(0%) swapped_out_or_unallocated=361.2M(100%)
Writable regions: Total=750.8M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=750.8M(100%)
 
                                VIRTUAL   REGION 
REGION TYPE                        SIZE    COUNT (non-coalesced) 
===========                     =======  ======= 
Accelerate.framework               256K        2 
Activity Tracing                  2048K        2 
CG backing stores                 3216K        5 
CG image                           204K       10 
CG shared images                   272K        8 
CoreAnimation                       28K        5 
CoreUI image data                 1504K       14 
CoreUI image file                  192K        4 
Dispatch continuations            4096K        2 
IOKit                             7940K        2 
Kernel Alloc Once                    8K        3 
MALLOC                            39.5M       19 
MALLOC guard page                   32K        7 
Memory Tag 242                      12K        2 
OpenCL                              24K        4 
OpenGL GLSL                        256K        4 
Process Corpse Info               2048K        2 
STACK GUARD                       56.2M       52 
Stack                             45.4M       52 
VM_ALLOCATE                      620.3M      874 
__DATA                            51.4M      291 
__GLSLBUILTINS                    2588K        2 
__IMAGE                            528K        2 
__LINKEDIT                        93.2M       19 
__TEXT                           267.9M      294 
__UNICODE                          552K        2 
mapped file                      348.0M       37 
shared memory                     31.3M        8 
===========                     =======  ======= 
TOTAL                              1.5G     1700 

Model: MacBook6,1, BootROM MB61.00C8.B00, 2 processors, Intel Core 2 Duo, 2,26 GHz, 2 GB, SMC 1.51f53
Graphics: NVIDIA GeForce 9400M, NVIDIA GeForce 9400M, PCI, 256 MB
Memory Module: BANK 0/DIMM0, 1 GB, DDR3, 1067 MHz, 0x80CE, 0x4D34373142323837334548312D4346382020
Memory Module: BANK 1/DIMM0, 1 GB, DDR3, 1067 MHz, 0x80CE, 0x4D34373142323837334548312D4346382020
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x93), Broadcom BCM43xx 1.0 (5.106.98.100.24)
Bluetooth: Version 4.4.6f1 17910, 3 services, 27 devices, 1 incoming serial ports
Network Service: Ethernet, Ethernet, en0
Serial ATA Device: Hitachi HTS545025B9SA02, 250,06 GB
Serial ATA Device: HL-DT-ST DVDRW  GS23N
USB Device: USB 2.0 Bus
USB Device: Built-in iSight
USB Device: USB 2.0 Bus
USB Device: USB Bus
USB Device: BRCM2070 Hub
USB Device: Bluetooth USB Host Controller
USB Device: USB Bus
USB Device: Apple Internal Keyboard / Trackpad
Thunderbolt Bus:

Reported on https://tor.stackexchange.com/questions/12207/tor-browser-crashes-every-time-on-mac

Child Tickets

Change History (6)

comment:1 Changed 4 years ago by gk

Component: - Select a componentApplications/Tor Browser
Keywords: tbb-crash added; tor browser os x pk11_digestfinal libnss removed
Priority: MediumHigh
Severity: NormalMajor
Status: newneeds_information

Could you update to the newest version and test whether the same crash is happening? If so, and this is reproducible, would could you help us debugging this by using a custom build with more debug information?

comment:2 Changed 4 years ago by gk

Summary: PK11_DigestFinal crash OSXPK11_DigestFinal crash in Tor Browser on OSX

comment:4 Changed 4 years ago by cypherpunks

Just so you're aware, I submitted the ticket but I'm not the OP of the crash dump. It was posted by a user on the linked stackexchange post (the full dump was lost but I recovered it and posted it here).

comment:5 Changed 4 years ago by cypherpunks

Replying to gk:

Could you update to the newest version and test whether the same crash is happening? If so, and this is reproducible, would could you help us debugging this by using a custom build with more debug information?

This is from the newest version, in the crash dump. The description was incorrect.

Last edited 4 years ago by cypherpunks (previous) (diff)

comment:6 Changed 4 years ago by gk

Resolution: duplicate
Status: needs_informationclosed

Closing this as duplicate of #20390 where the investigation happens.

Note: See TracTickets for help on using tickets.