[tor-bugs] #20970 [Applications/Tor Browser Sandbox]: Firefox crashes if the security slider is left at the default on certain pages.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Dec 14 19:54:52 UTC 2016
#20970: Firefox crashes if the security slider is left at the default on certain
pages.
----------------------------------------------+-------------------------
Reporter: yawning | Owner: yawning
Type: defect | Status: new
Priority: High | Milestone:
Component: Applications/Tor Browser Sandbox | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
----------------------------------------------+-------------------------
Comment (by yawning):
`sudo -E strace -ff -o /tmp/ff.trace -u yawning ./bin/sandboxed-tor-
browser` reveals this is a NULL pointer deref somewhere in `libxul.so`.
{{{
mprotect(0x32130c10000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x32130c10000, 4096, PROT_READ|PROT_EXEC) = 0
mprotect(0x32130c10000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x32130c10000, 4096, PROT_READ|PROT_EXEC) = 0
mprotect(0x32130c10000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x32130c10000, 4096, PROT_READ|PROT_EXEC) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x3959d088b68}
---
--- SIGSEGV {si_signo=SIGSEGV, si_code=SI_KERNEL, si_addr=NULL} ---
}}}
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20970#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list