[tbb-bugs] #22414 [Applications/Tor Browser]: Object URLs are not revoked, even after New Identity

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat May 27 07:58:17 UTC 2017


#22414: Object URLs are not revoked, even after New Identity
------------------------------------------+------------------------
     Reporter:  cypherpunks               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  High                      |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Major                     |   Keywords:  tbb-newnym
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+------------------------
 In #15502 this problem is completely described, but applied measures don't
 solve it.
 The docs say "Browsers will release these automatically when the document
 is unloaded". So, either document is never unloaded, or Mozilla forgot to
 implement this.
 Testcase is also in #15502 (creates blobs even when JS is disabled).
 Leftovers are visible in `about:memory`:
 {{{
 35 (100.0%) -- dom-media-stream-urls
 ├──22 (62.86%) -- owner unknown
 │  ├───1 (02.86%) ── blob:null/25779196-2491-42e5-8f69-4e52ac6ceb65
 │  ...
 ├───8 (22.86%) -- owner(resource://pdf.js/build/pdf.worker.js)
 │   ├──1 (02.86%) ──
 blob:resource://pdf.js/1ef14a0f-a417-47cb-9955-8b9f18a43e2c
 │   ...
 └───1 (02.86%) ──
 owner(https://people.torproject.org/~mikeperry/transient/tests/blob-uri-
 creation.html)/blob:https://people.torproject.org/e66522b9-85ea-4743-a773-aab2deb7bdc5
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22414>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list