[tbb-bugs] #24592 [Applications/Tor Browser]: Tor Browser crashes on Motherboard website

[Tor Bug Tracker & Wiki]

#24592: Tor Browser crashes on Motherboard website
------------------------------------------+----------------------
     Reporter:  cypherpunks               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 TBB crashes at motherboard.vice.com/en_ca

 This sometimes happens only occasionally. Today I noticed this site
 causing regular crashing of TBB when viewing content opened in tabs from
 home page.

 On crashing console shows:
 {{{
 [Child 25286] WARNING: pipe error (17): Connection reset by peer: file
 /home/debian/build/tor-
 browser/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 322
 [Child 25286] WARNING: pipe error (3): Connection reset by peer: file
 /home/debian/build/tor-
 browser/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 322

 ###!!! [Child][MessageChannel::SendAndWait] Error: Channel error: cannot
 send/recv


 ###!!! [Child][MessageChannel] Error:
 (msgtype=0x3E0003,name=PCompositable::Msg_Destroy) Channel error: cannot
 send/recv


 ###!!! [Child][MessageChannel] Error:
 (msgtype=0x8E0001,name=PLayer::Msg___delete__) Channel error: cannot
 send/recv

 [Child 25286] ###!!! ABORT: Aborting on channel error.: file
 /home/debian/build/tor-browser/ipc/glue/MessageChannel.cpp, line 2152
 [Child 25286] ###!!! ABORT: Aborting on channel error.: file
 /home/debian/build/tor-browser/ipc/glue/MessageChannel.cpp, line 2152
 }}}
 Followed by segfault.

 Even if I can avoid the crash, closing the browser after viewing the
 website shows in console:
 {{{
 windows.onRemoved event fired after context unloaded.
 [Parent 25385] WARNING: pipe error: Broken pipe: file /home/debian/build
 /tor-browser/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 685
 [Parent 25385] WARNING: pipe error (46): Connection reset by peer: file
 /home/debian/build/tor-
 browser/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 322
 }}}

 So the browser process segfaults "Aborting on channel error". I try to
 avoid loading this site with other tabs open.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24592>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online