[tbb-bugs] #24040 [Applications/Tor Browser]: TorBrowser crashes at riot.im/app

[Tor Bug Tracker & Wiki]

#24040: TorBrowser crashes at riot.im/app
--------------------------------------+-----------------------------------
 Reporter:  user                      |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:  tbb-crash                 |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by user):

 Backtrace for crash on torbrowser-7.0.8 on debian-10-buster:

 {{{
 [New Thread 0x7fffc1889700 (LWP 5455)]
 [New Thread 0x7fffb6a77700 (LWP 5456)]
 [New Thread 0x7fffce9ff700 (LWP 5457)]
 [New Thread 0x7fffc04fe700 (LWP 5458)]
 [Thread 0x7fffc04fe700 (LWP 5458) exited]
 [Thread 0x7fffc1889700 (LWP 5455) exited]
 [Thread 0x7fffce9ff700 (LWP 5457) exited]
 [New Thread 0x7fffce9ff700 (LWP 5459)]
 [New Thread 0x7fffc1889700 (LWP 5460)]

 Thread 76 "IndexedDB #4" received signal SIGSEGV, Segmentation fault.
 [Switching to Thread 0x7fffc1889700 (LWP 5460)]
 mozilla::dom::quota::QuotaObject::DisableQuotaCheck (this=0x0)
     at /home/debian/build/tor-browser/dom/quota/ActorsParent.cpp:2714
 2714    /home/debian/build/tor-browser/dom/quota/ActorsParent.cpp: No such
 file or directory.
 (gdb) backtrace
 #0  mozilla::dom::quota::QuotaObject::DisableQuotaCheck (this=0x0)
     at /home/debian/build/tor-browser/dom/quota/ActorsParent.cpp:2714
 #1  0x00007ffff39cf5ad in mozilla::dom::indexedDB::(anonymous
 namespace)::DatabaseConnection::DisableQuotaChecks (
     this=0x7fffcac91580) at /home/debian/build/tor-
 browser/dom/indexedDB/ActorsParent.cpp:11355
 #2  mozilla::dom::indexedDB::(anonymous
 namespace)::Database::StartTransactionOp::DoDatabaseWork
 (this=0x7fffcac79040,
     aConnection=0x7fffcac91580) at /home/debian/build/tor-
 browser/dom/indexedDB/ActorsParent.cpp:14927
 #3  0x00007ffff39cf10e in mozilla::dom::indexedDB::(anonymous
 namespace)::TransactionDatabaseOperationBase::RunOnConnectionThread
 (this=this at entry=0x7fffcac79040) at /home/debian/build/tor-
 browser/dom/indexedDB/ActorsParent.cpp:23735
 #4  0x00007ffff39cf28a in mozilla::dom::indexedDB::(anonymous
 namespace)::Database::StartTransactionOp::RunOnConnectionThread
     (this=0x7fffcac79040) at /home/debian/build/tor-
 browser/dom/indexedDB/ActorsParent.cpp:14914
 #5  0x00007ffff39c71b4 in mozilla::dom::indexedDB::(anonymous
 namespace)::TransactionDatabaseOperationBase::Run (
     this=0x7fffcac79040) at /home/debian/build/tor-
 browser/dom/indexedDB/ActorsParent.cpp:23906
 #6  0x00007ffff28ca7b1 in nsThread::ProcessNextEvent (this=0x7fffcc480590,
 aMayWait=<optimized out>, aResult=0x7fffc1888ccf)
     at /home/debian/build/tor-browser/xpcom/threads/nsThread.cpp:1216
 #7  0x00007ffff28e53b5 in NS_ProcessNextEvent (aThread=<optimized out>,
 aThread at entry=0x7fffcc480590,
     aMayWait=aMayWait at entry=true) at /home/debian/build/tor-
 browser/xpcom/glue/nsThreadUtils.cpp:361
 #8  0x00007ffff39b9e55 in mozilla::dom::indexedDB::(anonymous
 namespace)::ConnectionPool::ThreadRunnable::Run (
     this=0x7fffcc0aaca0) at /home/debian/build/tor-
 browser/dom/indexedDB/ActorsParent.cpp:13539
 #9  0x00007ffff28ca7b1 in nsThread::ProcessNextEvent (this=0x7fffcc480590,
 aMayWait=<optimized out>, aResult=0x7fffc1888dff)
     at /home/debian/build/tor-browser/xpcom/threads/nsThread.cpp:1216
 #10 0x00007ffff28e53b5 in NS_ProcessNextEvent (aThread=<optimized out>,
 aThread at entry=0x7fffcc480590,
     aMayWait=aMayWait at entry=false) at /home/debian/build/tor-
 browser/xpcom/glue/nsThreadUtils.cpp:361
 #11 0x00007ffff2bb0f81 in mozilla::ipc::MessagePumpForNonMainThreads::Run
 (this=0x7fffcc4085c0, aDelegate=0x7fffc70b9d50)
     at /home/debian/build/tor-browser/ipc/glue/MessagePump.cpp:338
 #12 0x00007ffff2b81b1c in MessageLoop::RunHandler (this=<optimized out>)
     at /home/debian/build/tor-
 browser/ipc/chromium/src/base/message_loop.cc:225
 #13 MessageLoop::Run (this=this at entry=0x7fffc70b9d50)
     at /home/debian/build/tor-
 browser/ipc/chromium/src/base/message_loop.cc:205
 #14 0x00007ffff28c953f in nsThread::ThreadFunc (aArg=0x7fffcc480590)
     at /home/debian/build/tor-browser/xpcom/threads/nsThread.cpp:467
 #15 0x00007ffff7f96ec7 in _pt_root (arg=0x7fffcc0630c0)
     at /home/debian/build/tor-
 browser/nsprpub/pr/src/pthreads/ptthread.c:216
 #16 0x00007ffff7bc3494 in start_thread (arg=0x7fffc1889700) at
 pthread_create.c:333
 #17 0x00007ffff6c51abf in clone () at
 ../sysdeps/unix/sysv/linux/x86_64/clone.S:97
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24040#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online