[tbb-bugs] #26320 [Applications/Tor Browser]: Orfox 52.8.0esr-7.5-1 Crash

[Tor Bug Tracker & Wiki]

#26320: Orfox 52.8.0esr-7.5-1 Crash
--------------------------------------+-----------------------------------
 Reporter:  sysrqb                    |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Immediate                 |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-mobile                |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by igt0):

 The backtrace when it crashes:


 {{{
 Program received signal SIGSEGV, Segmentation fault.
 [Switching to Thread 23125]
 0x9393f4ba in ?? ()
 Loading symbols... Done
 (gdb) bt
 #0  0x9393f4ba in js::jit::MacroAssemblerARM::ma_mov(js::jit::ImmGCPtr,
 js::jit::Register) ()
    from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #1  0x939469ee in void
 js::jit::MacroAssembler::storeUnboxedValue<js::jit::Address>(js::jit::ConstantOrRegister
 const&, js::jit::MIRType, js::jit::Address const&, js::jit::MIRType) ()
 from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #2  0x938338e8 in
 js::jit::CodeGenerator::visitStoreSlotT(js::jit::LStoreSlotT*) ()
    from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #3  0x93847baa in js::jit::CodeGenerator::generateBody() ()
    from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #4  0x93847fde in js::jit::CodeGenerator::generate() () from /opt/tor-
 browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #5  0x9385ac22 in js::jit::GenerateCode(js::jit::MIRGenerator*,
 js::jit::LIRGraph*) ()
    from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #6  0x93a3f654 in
 js::HelperThread::handleIonWorkload(js::AutoLockHelperThreadState&) ()
    from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #7  0x93a4001a in js::HelperThread::threadLoop() () from /opt/tor-browser
 /obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #8  0x93a4f88e in js::detail::ThreadTrampoline<void (&)(void*),
 js::HelperThread*>::Start(void*) ()
    from /opt/tor-browser/obj-tbb-arm-linux-androideabi/dist/bin/libxul.so
 #9  0xb6ccea04 in ?? ()
 #10 0xb6ccea04 in ?? ()
 Backtrace stopped: previous frame identical to this frame (corrupt stack?)

 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26320#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online