Opened 7 years ago

Closed 6 years ago

#8821 closed defect (user disappeared)

TorBrowser crashes in nss3.dll

Reported by: cryptal Owned by: mikeperry
Priority: Very High Milestone: TorBrowserBundle 2.3.x-stable
Component: Firefox Patch Issues Version:
Severity: Keywords: tbb-crash
Cc: g.koppen@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


TorBrowser with Firefox 17.0.5 crashes out of the blue when I have many tabs open. Super frustrating, because I can't restore the session and lost all my research.

Faulting application name: tbb-firefox.exe, version:, time stamp: 0x5159dcb1
Faulting module name: nss3.dll, version:, time stamp: 0x5159cb1f
Exception code: 0xc0000005
Fault offset: 0x00032be6
Faulting process id: 0x2f80
Faulting application start time: 0x01ce444ff6f243ba
Faulting application path: C:\Tor Browser\FirefoxPortable\App\Firefox\tbb-firefox.exe
Faulting module path: C:\Tor Browser\FirefoxPortable\App\Firefox\nss3.dll
Report Id: 82e43196-b48c-11e2-a8c6-1c659dad87fe

PS: I tried to set Version and Component, but there's no TorBrowser or Firefox.

Child Tickets

Change History (4)

comment:1 Changed 7 years ago by gk

Cc: g.koppen@… added
Component: - Select a componentFirefox Patch Issues
Keywords: tbb-crash added
Milestone: TorBrowserBundle 2.3.x-stable
Owner: set to mikeperry

Interesting. Can you somehow reproduce that or give some steps which one could try?

mikeperry: I hope this is a patch issue (although I fear an issue with the build setup is more likely...).

comment:2 Changed 6 years ago by cypherpunks

Code from offset of nss3.dll:

mov     eax, [esi+54h]

That from nssCertificate_Destroy:

nssCertificate_Destroy (
  NSSCertificate *c
    nssCertificateStoreTrace lockTrace = {NULL, NULL, PR_FALSE, PR_FALSE};
    nssCertificateStoreTrace unlockTrace = {NULL, NULL, PR_FALSE, PR_FALSE};

    if (c) {
	PRUint32 i;
	nssDecodedCert *dc = c->decoding;  <---- Crash here

c points to nowhere, and it's not NULL it seems.
Any known fixed bugs that would to fix that too or it's something new? Would it be triggered by some firefox patches?

comment:3 Changed 6 years ago by mikeperry

Can you provide a stack trace?

Or a repro case?

comment:4 Changed 6 years ago by cypherpunks

Resolution: user disappeared
Status: newclosed

It seems like
And those bug didn't updated for year, lets assume they fixed it occasionally.

No new details happened and no reports for TBB3.

Note: See TracTickets for help on using tickets.