Opened 15 months ago

Last modified 15 months ago

#22503 needs_information defect

Tor Browser crash when quit during bootstrap

Reported by: teor Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-crash
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I started Tor Browser by clicking a link from an email, but then quit it as it was bootstrapping. Then it crashed like this:

Process:               firefox [63482]
Path:                  /Applications/TorBrowser.app/Contents/MacOS/firefox
Identifier:            org.mozilla.tor browser
Version:               6.5.2 (4517.2.1)
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
Responsible:           firefox [63482]
...
OS Version:            Mac OS X 10.12.5 (16F73)
Report Version:        12
...
System Integrity Protection: enabled

Crashed Thread:        40  Shutdow~minator

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [0]

VM Regions Near 0:
--> 
    __TEXT                 000000010d64f000-000000010d652000 [   12K] r-x/rwx SM=COW  /Applications/TorBrowser.app/Contents/MacOS/firefox

Thread 0:: Dispatch queue: com.apple.main-thread
0   XUL                           	0x000000010dd4eaa8 0x10dc8e000 + 789160

Thread 1:
0   libsystem_kernel.dylib        	0x00007fffa5b9a44e __workq_kernreturn + 10
1   libsystem_pthread.dylib       	0x00007fffa5c84621 _pthread_wqthread + 1426
2   libsystem_pthread.dylib       	0x00007fffa5c8407d start_wqthread + 13

Thread 2:
0   libsystem_kernel.dylib        	0x00007fffa5b9a44e __workq_kernreturn + 10
1   libsystem_pthread.dylib       	0x00007fffa5c84621 _pthread_wqthread + 1426
2   libsystem_pthread.dylib       	0x00007fffa5c8407d start_wqthread + 13

Thread 3:: Gecko_IOThread
0   libsystem_kernel.dylib        	0x00007fffa5b9ad96 kevent + 10
1   XUL                           	0x000000010df702bc 0x10dc8e000 + 3023548

Thread 4:: Closing Service
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 5:: JS Helper
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

... (5-16 are all the same) ...

Thread 17:
0   libsystem_kernel.dylib        	0x00007fffa5b9234a mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fffa5b91797 mach_msg + 55

Thread 18:: JS Watchdog
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712

Thread 19:: Hang Monitor
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 20:: Timer
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1de93 PR_WaitCondVar + 227

Thread 21:: Cache2 I/O
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 22:: Cert Verify
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 23:: Compositor
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   XUL                           	0x000000010df60988 0x10dc8e000 + 2959752
3   ???                           	0x8000000000000000 0 + 9223372036854775808

Thread 24:: ImageBridgeChild
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   XUL                           	0x000000010df60988 0x10dc8e000 + 2959752
3   ???                           	0x8000000000000000 0 + 9223372036854775808

Thread 25:: ImgDecoder #1
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

... (26-31 are all the same) ...

Thread 32:: ImageIO
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 33:: IPDL Background
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 34:: DOM Worker
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c857fa _pthread_cond_wait + 712
2   libnss3.dylib                 	0x000000010db1dead PR_WaitCondVar + 253

Thread 35:
0   libsystem_kernel.dylib        	0x00007fffa5b9234a mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fffa5b91797 mach_msg + 55

Thread 36:
0   libsystem_kernel.dylib        	0x00007fffa5b9a44e __workq_kernreturn + 10
1   libsystem_pthread.dylib       	0x00007fffa5c84621 _pthread_wqthread + 1426
2   libsystem_pthread.dylib       	0x00007fffa5c8407d start_wqthread + 13

... (37-39 are all the same) ...

Thread 40 Crashed:: Shutdow~minator
0   XUL                           	0x000000010fd4bcbb 0x10dc8e000 + 34331835

Thread 41:: CVDisplayLink
0   libsystem_kernel.dylib        	0x00007fffa5b99bf2 __psynch_cvwait + 10
1   libsystem_pthread.dylib       	0x00007fffa5c85833 _pthread_cond_wait + 769
2   com.apple.CoreVideo           	0x00007fff919ad977 CVDisplayLink::waitUntil(unsigned long long) + 233
3   com.apple.CoreVideo           	0x00007fff919ad762 CVDisplayLink::runIOThread() + 520
4   libsystem_pthread.dylib       	0x00007fffa5c8493b _pthread_body + 180
5   libsystem_pthread.dylib       	0x00007fffa5c84887 _pthread_start + 286
6   libsystem_pthread.dylib       	0x00007fffa5c8408d thread_start + 13

Thread 40 crashed with X86 Thread State (64-bit):
  rax: 0x000000000000003f  rbx: 0x00006080000183c0  rcx: 0x000000000000b979  rdx: 0x000000000000b978
  rdi: 0x000000010d765180  rsi: 0x0000000000000008  rbp: 0x000000000000003f  rsp: 0x0000700003623eb0
   r8: 0x000061000017ca58   r9: 0x0000000000f0d02a  r10: 0x000061000017ca60  r11: 0xffffffff00000000
  r12: 0x000000010db200b0  r13: 0x0000000000007d0b  r14: 0x0000700003624000  r15: 0x00007fc7a0f5c450
  rip: 0x000000010fd4bcbb  rfl: 0x0000000000010246  cr2: 0x0000000000000000
  
Logical CPU:     0
Error Code:      0x00000006
Trap Number:     14

Child Tickets

Change History (2)

comment:1 Changed 15 months ago by gk

Keywords: tbb-crash added
Status: newneeds_information

Is that reproducible?

comment:2 in reply to:  1 Changed 15 months ago by teor

Replying to gk:

Is that reproducible?

I could not reproduce it.
It might require issuing a quit event at just the right time.

Note: See TracTickets for help on using tickets.