Opened 7 years ago

Closed 7 years ago

#8601 closed defect (duplicate)

[Crash] Tor Browser Linux 64bit randomly crashes while browsing the web

Reported by: chelsel Owned by: mikeperry
Priority: High Milestone: TorBrowserBundle 2.3.x-stable
Component: Firefox Patch Issues Version: Tor: 0.2.3.25
Severity: Keywords: tbb-crash, MikePerry201304
Cc: g.koppen@…, mcs, brade Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Hello.

Using:
Tor Browser Bundle Version 2.3.25-5.
Linux 64bit, Ubuntu 12.04.2
Completely stock bundle, with no customization. Completely fresh session.

BUG-description: Tor Browser is crashing randomly and with no obvious reason while browsing the web. It happens frequently, but not within any specific time interval. Maybe at least few times every ten minutes. It happens while just loading
ordinary websites like bbc.com and others. No tab-movement involved.
No drag and dropping involved. Just plain surfing. Sometimes shortly before the crash it freezes, sometimes it crashes without any freeze. weird.

Tried to set extensions.torbutton.loglevel to 3 and extensions.torbutton.logmethod to 0. In the log, there seems to be no unusual log entry. is there a better way to log these crashes?

Child Tickets

Attachments (1)

debug-log.txt (151.3 KB) - added by chelsel 7 years ago.
debug-log during the crash

Download all attachments as: .zip

Change History (12)

Changed 7 years ago by chelsel

Attachment: debug-log.txt added

debug-log during the crash

comment:1 Changed 7 years ago by gk

Cc: g.koppen@… added

I got it crashed, too. Let me see if I get more information with a debug build and gdb...

comment:2 Changed 7 years ago by mikeperry

Keywords: tbb-crash added

Fun. The only time my Linux TBB crashes is New Identity (#8559) :/.

comment:3 Changed 7 years ago by bataglia

Mine is also crashing, but i am using the windows 7 64 version. It usually happens by this time (during the nights I face no problems with TOR). Strange.

comment:4 Changed 7 years ago by gk

Not sure if it is related to the issue in this ticket actually but it is Tor Browser related I think:

###!!! ABORT: Evicting an already-evicted cache entry!: '!entry->Evicted()', file /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp, line 1433

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff570f44d in mozalloc_abort (msg=0x7fffffffa890 "###!!! ABORT: Evicting an already-evicted cache entry!: '!entry->Evicted()', file /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp, line 1433") at /home/firefox64/TBB/debug-build/mozilla-esr17/memory/mozalloc/mozalloc_abort.cpp:23
23 MOZ_CRASH();
(gdb) bt
#0 0x00007ffff570f44d in mozalloc_abort (msg=0x7fffffffa890 "###!!! ABORT: Evicting an already-evicted cache entry!: '!entry->Evicted()', file /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp, line 1433") at /home/firefox64/TBB/debug-build/mozilla-esr17/memory/mozalloc/mozalloc_abort.cpp:23
#1 0x00007ffff348239d in Abort (aMsg=0x7fffffffa890 "###!!! ABORT: Evicting an already-evicted cache entry!: '!entry->Evicted()', file /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp, line 1433") at /home/firefox64/TBB/debug-build/mozilla-esr17/xpcom/base/nsDebugImpl.cpp:423
#2 0x00007ffff34822b0 in NS_DebugBreak_P (aSeverity=3, aStr=0x7ffff41d5e10 "Evicting an already-evicted cache entry!", aExpr=0x7ffff41d5dfb "!entry->Evicted()", aFile=0x7ffff41d4fb0 "/home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp", aLine=1433) at /home/firefox64/TBB/debug-build/mozilla-esr17/xpcom/base/nsDebugImpl.cpp:380
#3 0x00007ffff1c4738c in imgLoader::RemoveKeyFromCache (cache=..., queue=..., key=...) at /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp:1433
#4 0x00007ffff1c45a0f in imgLoader::PutIntoCache (key=..., entry=0x7fffc1139dc0) at /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp:1034
#5 0x00007ffff1c497d1 in imgLoader::LoadImageWithChannel (this=0x7fffd57aa6f0, channel=0x7fffc6af0058, aObserver=0x7fffc2eae8d8, aCX=0x7fffc04e9800, listener=0x7fffc1139db0, _retval=0x7fffc2eae8e8) at /home/firefox64/TBB/debug-build/mozilla-esr17/image/src/imgLoader.cpp:1931
#6 0x00007ffff21064d6 in nsImageLoadingContent::LoadImageWithChannel (this=0x7fffc2eae8d8, aChannel=0x7fffc6af0058, aListener=0x7fffc1139db0) at /home/firefox64/TBB/debug-build/mozilla-esr17/content/base/src/nsImageLoadingContent.cpp:543
#7 0x00007ffff23d578c in mozilla::dom::ImageListener::OnStartRequest (this=0x7fffc1139d90, request=0x7fffc6af0058, ctxt=0x0) at /home/firefox64/TBB/debug-build/mozilla-esr17/content/html/document/src/ImageDocument.cpp:207
#8 0x00007ffff2cbfd41 in nsDocumentOpenInfo::OnStartRequest (this=0x7fffd0126920, request=0x7fffc6af0058, aCtxt=0x0) at /home/firefox64/TBB/debug-build/mozilla-esr17/uriloader/base/nsURILoader.cpp:273
#9 0x00007ffff1b0582f in mozilla::net::nsHttpChannel::CallOnStartRequest (this=0x7fffc6af0000) at /home/firefox64/TBB/debug-build/mozilla-esr17/netwerk/protocol/http/nsHttpChannel.cpp:965
#10 0x00007ffff1b155be in mozilla::net::nsHttpChannel::ContinueOnStartRequest3 (this=0x7fffc6af0000, result=0) at /home/firefox64/TBB/debug-build/mozilla-esr17/netwerk/protocol/http/nsHttpChannel.cpp:4910
#11 0x00007ffff1b15588 in mozilla::net::nsHttpChannel::ContinueOnStartRequest2 (this=0x7fffc6af0000, result=0) at /home/firefox64/TBB/debug-build/mozilla-esr17/netwerk/protocol/http/nsHttpChannel.cpp:4901
#12 0x00007ffff1b1546b in mozilla::net::nsHttpChannel::OnStartRequest (this=0x7fffc6af0000, request=0x7fffcc3b6780, ctxt=0x0) at /home/firefox64/TBB/debug-build/mozilla-esr17/netwerk/protocol/http/nsHttpChannel.cpp:4874
#13 0x00007ffff19ea5b0 in nsInputStreamPump::OnStateStart (this=0x7fffcc3b6780) at /home/firefox64/TBB/debug-build/mozilla-esr17/netwerk/base/src/nsInputStreamPump.cpp:417
#14 0x00007ffff19ea367 in nsInputStreamPump::OnInputStreamReady (this=0x7fffcc3b6780, stream=0x7fffda258cf8) at /home/firefox64/TBB/debug-build/mozilla-esr17/netwerk/base/src/nsInputStreamPump.cpp:368
#15 0x00007ffff344efa5 in nsInputStreamReadyEvent::Run (this=0x7fffd8f66c80) at /home/firefox64/TBB/debug-build/mozilla-esr17/xpcom/io/nsStreamUtils.cpp:82
#16 0x00007ffff34724f4 in nsThread::ProcessNextEvent (this=0x7ffff6c6f300, mayWait=false, result=0x7fffffffb7df) at /home/firefox64/TBB/debug-build/mozilla-esr17/xpcom/threads/nsThread.cpp:624
#17 0x00007ffff3403d51 in NS_ProcessNextEvent_P (thread=0x7ffff6c6f300, mayWait=false) at /home/firefox64/TBB/debug-build/mozilla-esr17/obj-x86_64-unknown-linux-gnu/xpcom/build/nsThreadUtils.cpp:220
#18 0x00007ffff31e1ece in mozilla::ipc::MessagePump::Run (this=0x7fffe7f2d040, aDelegate=0x7ffff6cb7120) at /home/firefox64/TBB/debug-build/mozilla-esr17/ipc/glue/MessagePump.cpp:82
#19 0x00007ffff34c4607 in MessageLoop::RunInternal (this=0x7ffff6cb7120) at /home/firefox64/TBB/debug-build/mozilla-esr17/ipc/chromium/src/base/message_loop.cc:208
#20 0x00007ffff34c4598 in MessageLoop::RunHandler (this=0x7ffff6cb7120) at /home/firefox64/TBB/debug-build/mozilla-esr17/ipc/chromium/src/base/message_loop.cc:201
#21 0x00007ffff34c4571 in MessageLoop::Run (this=0x7ffff6cb7120) at /home/firefox64/TBB/debug-build/mozilla-esr17/ipc/chromium/src/base/message_loop.cc:175
#22 0x00007ffff305d0d2 in nsBaseAppShell::Run (this=0x7fffe22ba470) at /home/firefox64/TBB/debug-build/mozilla-esr17/widget/xpwidgets/nsBaseAppShell.cpp:163
#23 0x00007ffff2d80616 in nsAppStartup::Run (this=0x7fffe2250970) at /home/firefox64/TBB/debug-build/mozilla-esr17/toolkit/components/startup/nsAppStartup.cpp:273
#24 0x00007ffff19a6de7 in XREMain::XRE_mainRun (this=0x7fffffffbc50) at /home/firefox64/TBB/debug-build/mozilla-esr17/toolkit/xre/nsAppRunner.cpp:3812
#25 0x00007ffff19a70c7 in XREMain::XRE_main (this=0x7fffffffbc50, argc=1, argv=0x7fffffffe0b8, aAppData=0x637c40) at /home/firefox64/TBB/debug-build/mozilla-esr17/toolkit/xre/nsAppRunner.cpp:3889
#26 0x00007ffff19a72e2 in XRE_main (argc=1, argv=0x7fffffffe0b8, aAppData=0x637c40, aFlags=0) at /home/firefox64/TBB/debug-build/mozilla-esr17/toolkit/xre/nsAppRunner.cpp:3965
#27 0x0000000000402a7f in do_main (argc=1, argv=0x7fffffffe0b8) at /home/firefox64/TBB/debug-build/mozilla-esr17/browser/app/nsBrowserApp.cpp:174
#28 0x0000000000402d35 in main (argc=1, argv=0x7fffffffe0b8) at /home/firefox64/TBB/debug-build/mozilla-esr17/browser/app/nsBrowserApp.cpp:279

I got that while hitting the back button after surfing a while on some major newspaper website.

comment:5 Changed 7 years ago by mikeperry

Cc: mcs brade added

Hrmm, I think mcs+brade ran into something like this while cleaning up other issues with this patch. Guys: Let me know if anything is obvious here.

comment:6 Changed 7 years ago by gk

Today I got a crash with basically the same stack trace while just surfing like chelsel. Might be indeed her/his issue...

comment:7 Changed 7 years ago by mikeperry

Keywords: MikePerry201304 added
Priority: normalmajor

We also evict cache entries during New Identity, and we're experiencing crashes there too (#8559). Did you use New Identity at all in either of these sessions?

I've switched to debug builds for my dev-related browsing. We'll see if I hit it, too.

comment:8 in reply to:  7 Changed 7 years ago by gk

Replying to mikeperry:

We also evict cache entries during New Identity, and we're experiencing crashes there too (#8559). Did you use New Identity at all in either of these sessions?

Never. Btw: The crashes happen on 32bit systems as well.

comment:9 in reply to:  5 Changed 7 years ago by mcs

Replying to mikeperry:

Hrmm, I think mcs+brade ran into something like this while cleaning up other issues with this patch. Guys: Let me know if anything is obvious here.

If I remember correctly, we only saw the crash in debug builds and we did not see it with the final cache isolation patch. But I guess there was a lurking problem. We were using a 32-bit system.

comment:10 Changed 7 years ago by mikeperry

See #8628 for a potential fix.

comment:11 Changed 7 years ago by mikeperry

Resolution: duplicate
Status: newclosed

Calling this a dup of #8628. Fix is already in TBB-alpha, and will appear in the next TBB-stable.

Note: See TracTickets for help on using tickets.