Opened 2 years ago

Last modified 4 months ago

#26879 new defect

Disk leak on macOS due to Notification API

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-disk-leak, tbb-newnym, tbb-torbutton, gitlab-tb-torbutton
Cc: kmodi Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


Konark Modi reported a while ago a disk leak at least on macOS due to the Notification API. Here is the bug report:

The leak is cause by: API.

Steps to reproduce:
1. Visit
2. Temporarily allow JS.
3. Click on Authorize button.
4. Click on Show button.
5. Notification should occur.

macOS by default saves these notification in`/private/var/folders/qs/54swlb5d1fx4hq969vdqg4rr0000gn/0/` . It dumps the content of the notification and the website name.

This location can be found using:
Activity Monitor -> Search for process user noted -> Open files and ports -> Notifications DB.

Now, although the user opted in to these notifications, but this is an intended leak from OS level.

Child Tickets

Change History (3)

comment:1 Changed 2 years ago by gk

Cc: kmodi added; kmosi removed

comment:2 Changed 2 years ago by gk

Keywords: tbb-newnym added

Oh, and it seems this survives New Identity as well.

comment:3 Changed 4 months ago by acat

Keywords: tbb-torbutton gitlab-tb-torbutton added
Note: See TracTickets for help on using tickets.