Opened 7 years ago

Closed 7 years ago

#7142 closed defect (duplicate)

TorBrowser crashes on certain JavaScript

Reported by: cypherpunks Owned by: mikeperry
Priority: High Milestone:
Component: Firefox Patch Issues Version:
Severity: Keywords: TBB torbrowser
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I found a JavaScript button that makes the TorBrowser crash.

http://www.nu.nl/internet/2935978/ CTRL+f for "door:" and press (or right-click) the red "reageer" button.

Program received signal SIGSEGV, Segmentation fault.
0x00007f8466a20c51 in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so

#0  0x00007f8466a20c51 in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#1  0x00007f8466a2726d in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#2  0x00007f8466a2ac8f in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#3  0x00007f8466e4210c in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#4  0x00007f8466e4260f in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#5  0x00007f8467352ab4 in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#6  0x00007f84673441b3 in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#7  0x00007f8467352b3f in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#8  0x00007f8467353028 in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#9  0x00007f84672cf30f in JS_CallFunctionValue ()
   from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#10 0x00007f8466ddd130 in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#11 0x00007f8466dd98bc in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#12 0x00007f846714959f in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#13 0x00007f8467148a5f in ?? () from /home/cypherpunks/tor-browser_en-US/App/Firefox/libxul.so
#14 0x00007f843a1ba2c0 in ?? ()
#15 0x00007f844fda7350 in ?? ()
#16 0x00007fffe230bb10 in ?? ()
#17 0x00007f844fda7350 in ?? ()
#18 0x0000000044cf4e40 in ?? ()
#19 0x0000000000000004 in ?? ()
#20 0x0000000000000000 in ?? ()

Child Tickets

Change History (4)

comment:1 Changed 7 years ago by cypherpunks

(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x00007f846a5d7b7b in raise () from /lib/x86_64-linux-gnu/libpthread.so.0
(gdb) c
Continuing.
[Thread 0x7f84588e2700 (LWP 8178) exited]
[Thread 0x7f845e4da700 (LWP 8176) exited]
[Thread 0x7f84566ff700 (LWP 8181) exited]
[Thread 0x7f84572e1700 (LWP 8180) exited]
[Thread 0x7f8453699700 (LWP 8184) exited]
[Thread 0x7f84376fb700 (LWP 8295) exited]
[Thread 0x7f844e4e6700 (LWP 8186) exited]
[Thread 0x7f8453e9a700 (LWP 8183) exited]
[Thread 0x7f845cc68700 (LWP 8177) exited]
[Thread 0x7f8457ae2700 (LWP 8179) exited]
[Thread 0x7f844dce5700 (LWP 8187) exited]
[Thread 0x7f844d2ff700 (LWP 8188) exited]
[Thread 0x7f844cafe700 (LWP 8189) exited]
[Thread 0x7f84498ff700 (LWP 8190) exited]
[Thread 0x7f84520ff700 (LWP 8192) exited]
[Thread 0x7f843a0ff700 (LWP 8193) exited]
[Thread 0x7f8455339700 (LWP 8196) exited]
[Thread 0x7f84396ff700 (LWP 8197) exited]
[Thread 0x7f8438efe700 (LWP 8198) exited]
[Thread 0x7f8448dff700 (LWP 8201) exited]
[Thread 0x7f84386fd700 (LWP 8202) exited]

Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.

comment:2 Changed 7 years ago by mikeperry

Most likely this is a dup of #7128. If you set noscript.clearClick to 0 in about:config, does that stop the crash bug from happening?

comment:3 Changed 7 years ago by cypherpunks

Yes, disabling the anti-clickjacking feature in NoScript seems to prevent the TorBrowser from crashing.

comment:4 Changed 7 years ago by mikeperry

Resolution: duplicate
Status: newclosed

Dup of #7128 then. The real fix should appear in the next TBB.

Note: See TracTickets for help on using tickets.