[tbb-bugs] #19400 [Applications/Tor Browser]: [Asan] Crash in js::AsmJSModule::deserialize / DeserializeSig

[Tor Bug Tracker & Wiki]

#19400: [Asan] Crash in js::AsmJSModule::deserialize / DeserializeSig
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  Very High                            |         Status:
Component:  Applications/Tor Browser             |  assigned
 Severity:  Critical                             |      Milestone:
 Keywords:  tbb-crash, TorBrowserTeam201606,     |        Version:
  tbb-6.0-issues                                 |     Resolution:
Parent ID:                                       |  Actual Points:
 Reviewer:                                       |         Points:
                                                 |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:20 cypherpunks]:
 > Replying to [comment:15 gk]:
 > > Hi cypherpunk: could you test one final build (I think we are pretty
 close to getting this reproduced) and see whether it is crashing for you:
 > >
 > > https://people.torproject.org/~gk/testbuilds/tor-browser-
 linux64-bug19400_v3-hardened_ALL.tar.xz
 > > https://people.torproject.org/~gk/testbuilds/tor-browser-
 linux64-bug19400_v3-hardened_ALL.tar.xz.asc
 > >
 >
 > This build looks fine, can't reproduce the crash with it.

 Thanks. This is using exactly the same branch as we have in 6.0.1. Thus,
 you can work around that crash for now by either installing a fresh new
 Tor Browser, or, if you are adventurous, just deleting the asmjs related
 files in your profile directory (see comment:16 and assuming Facebook is
 caching such stuff too) should help, too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19400#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online