[tbb-bugs] #31616 [Applications/Tor Browser]: Tor Browser on Android based on 60.9.0 is crashing on every launch

[Tor Bug Tracker & Wiki]

#31616: Tor Browser on Android based on 60.9.0 is crashing on every launch
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tbb-mobile, tbb-crash,               |  Actual Points:
  TorBrowserTeam201909                           |
Parent ID:                                       |         Points:  2
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by sysrqb):

 Replying to [comment:13 sysrqb]:
 > Google Play shows this is primarily affecting Android 9 on aarch64.
 `signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x2aae` is
 interesting. This is the same fault address (and same code) as #31140.

 This is the same bug as #31140. acat found there was a syntax error on
 [ticket:31140#comment:30 #31140] in the original patch and corrected that.
 I didn't notice the syntax error while I was testing the original patch
 and I incorrectly assumed the patch avoided the gecko crash, instead the
 syntax error preventing the code from executing.

 After some more testing now, it does seems like
 `javascript.options.native_regexp` is the correct pref we should disable.
 `ion` is not the cause and it is enable by default (and it does not cause
 a crash).

 From there it gets more interesting:
 {{{
 09-04 17:50:42.045  4803  4821 I GeckoThread: preparing to run Gecko
 09-04 17:50:42.048  4803  4821 D GeckoThread: State changed to
 MOZGLUE_READY
 [...]
 09-04 17:50:42.234  4803  4821 E GeckoLibLoad: Load sqlite start
 09-04 17:50:42.236  4803  4821 E GeckoLinker: /system/lib64/libc.so:
 Missing or broken DT_HASH
 09-04 17:50:42.236  4803  4821 E GeckoLinker: /system/lib64/libc.so:
 Missing or broken DT_HASH
 [...]
 09-04 17:50:46.360  4803  4829 D         : HostConnection::get() New Host
 Connection established 0x79d891ea80, tid 4829
 09-04 17:50:46.389  4803  4829 I OpenGLRenderer: Initialized EGL, version
 1.4
 09-04 17:50:46.390  4803  4829 D OpenGLRenderer: Swap behavior 1
 09-04 17:50:46.391  4803  4829 W OpenGLRenderer: Failed to choose config
 with EGL_SWAP_BEHAVIOR_PRESERVED, retrying without...
 09-04 17:50:46.391  4803  4829 D OpenGLRenderer: Swap behavior 0
 09-04 17:50:46.402  4803  4829 D EGL_emulation: eglCreateContext:
 0x79d89140e0: maj 2 min 0 rcv 2
 09-04 17:50:46.406  4803  4829 D EGL_emulation: eglMakeCurrent:
 0x79d89140e0: ver 2 0 (tinfo 0x79d892ae80)
 09-04 17:50:46.511  4803  4821 F libc    : Fatal signal 11 (SIGSEGV), code
 2, fault addr 0x79e8078108 in tid 4821 (Gecko)
 09-04 17:50:46.519  4803  4803 D GeckoToolbar: onTabChanged: SELECTED
 09-04 17:50:46.551  4803  4803 D GeckoBrowserApp: BrowserApp.onTabChanged:
 0: SELECTED
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31616#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online