[tbb-bugs] #19400 [Applications/Tor Browser]: [Asan] Crash in js::AsmJSModule::deserialize / DeserializeSig

[Tor Bug Tracker & Wiki]

#19400: [Asan] Crash in js::AsmJSModule::deserialize / DeserializeSig
---------------------------------------------+-----------------------------
 Reporter:  cypherpunks                      |          Owner:  tbb-team
     Type:  defect                           |         Status:
 Priority:  Very High                        |  needs_information
Component:  Applications/Tor Browser         |      Milestone:
 Severity:  Critical                         |        Version:
 Keywords:  tbb-crash, TorBrowserTeam201606  |     Resolution:
Parent ID:                                   |  Actual Points:
 Reviewer:                                   |         Points:
                                             |        Sponsor:
---------------------------------------------+-----------------------------
Changes (by gk):

 * status:  new => needs_information
 * cc: virtualritz, mcs, brade, arthuredelstein (added)


Comment:

 It seems I can't get my hand on a Facebook account which is kind of
 required to reproduce this bug. If anybody has some (dormant) one for
 testing please let me know (gk [@] torproject.org 35CD 74C2 4A9B 15A1 9E1A
 81A1 9437 3AA9 4B7C 3223).

 That said there are still things that can be done to try finding more out
 about this bug.

 1) Does saving the whole website locally and using that one (via file:///)
 crash as well? If so, could I get a copy of that website (see above for
 contact details)?
 2) Does 6.0a5-hardened (or 6.0) crash as well?
 3) If you are adventurous, testing a vanilla Firefox ASan build
 (https://ftp.mozilla.org/pub/firefox/tinderbox-builds/mozilla-central-
 linux64-asan/1450090940/) would be pretty interesting. Pointing it to your
 local tor should be all that is needed to reach facebookcorewwwi.onion.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19400#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online