[tbb-bugs] #18375 [Applications/Tor Browser]: HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons after some launches. (was: HTTPSEverywhere becomes disabled and not shown in about:addons after some launches.)

[Tor Bug Tracker & Wiki]

#18375: HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons
after some launches.
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-security              |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------
Changes (by cypherpunks):

 * keywords:   => tbb-security


Comment:

 How it works with TBB 7.5.5 (NoScript 5.1.8.6):
 {{{
 Tor NOTICE: Heartbeat: Tor's uptime is 4 days 6:20 hours, with 0 circuits
 open. I've sent 22.72 MB and received 100.46 MB.
 Tor WARN: comparing times on millisecond detail too far apart: 31581236
 seconds
 Tor NOTICE: Your system clock just jumped 31581238 seconds forward;
 assuming established circuits no longer work.
 Tor NOTICE: Heartbeat: Tor's uptime is 4 days 8:12 hours, with 0 circuits
 open. I've sent 22.98 MB and received 101.07 MB.
 Tor WARN: Received a bad CERTS cell: At least one certificate expired.
 Tor NOTICE: Tried for 120 seconds to get a connection to [scrubbed]:443.
 Giving up. (waiting for circuit)
 addons.update-checker   WARN    Request for
 https://secure.informaction.com/download/classic/?v=5.1.8.5 timed out
 addons.xpi      WARN    Add-on {73a6fe31-595d-460b-a920-fcc0f8843232} is
 not correctly signed.
 No matching message handler for the given recipient.
 MessageChannel.jsm:621
 }}}
 i.e. with clock skew (1y forward), auto update of add-ons disables
 NoScript.
 After setting the time correctly, NoScript is still disabled and:
 {{{
 addons.update-checker   WARN    onUpdateCheckComplete failed to parse
 update manifest: [Exception... "Update manifest is missing a required
 addons property."  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location:
 "JS frame :: resource://gre/modules/addons/AddonUpdateChecker.jsm ::
 getRequiredProperty :: line 473"  data: no] Stack trace:
 getRequiredProperty()@resource://gre/modules/addons/AddonUpdateChecker.jsm:473
 <
 parseJSONManifest()@resource://gre/modules/addons/AddonUpdateChecker.jsm:483
 <
 UpdateParser.prototype.onLoad/parser()@resource://gre/modules/addons/AddonUpdateChecker.jsm:655
 <
 UpdateParser.prototype.onLoad()@resource://gre/modules/addons/AddonUpdateChecker.jsm:675
 <
 UpdateParser/<()@resource://gre/modules/addons/AddonUpdateChecker.jsm:593
 < onStopRequest()@resource://gre/modules/WebRequest.jsm:347
 addons.xpi      WARN    Add-on {73a6fe31-595d-460b-a920-fcc0f8843232} is
 not correctly signed.
 }}}
 Only after updating and parsing add-ons blocklist, and then updating add-
 ons, NoScript is enabled again.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18375#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online