[tor-bugs] #8821 [Firefox Patch Issues]: TorBrowser crashes in nss3.dll

[Tor Bug Tracker & Wiki]

#8821: TorBrowser crashes in nss3.dll
-------------------------------------+-------------------------------------
     Reporter:  cryptal              |      Owner:  mikeperry
         Type:  defect               |     Status:  new
     Priority:  critical             |  Milestone:  TorBrowserBundle
    Component:  Firefox Patch        |  2.3.x-stable
  Issues                             |    Version:
   Resolution:                       |   Keywords:  tbb-crash
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------------

Comment (by cypherpunks):

 Code from offset of nss3.dll:
 {{{
 mov     eax, [esi+54h]
 }}}
 That from nssCertificate_Destroy:
 {{{
 NSS_IMPLEMENT PRStatus
 nssCertificate_Destroy (
   NSSCertificate *c
 )
 {
     nssCertificateStoreTrace lockTrace = {NULL, NULL, PR_FALSE, PR_FALSE};
     nssCertificateStoreTrace unlockTrace = {NULL, NULL, PR_FALSE,
 PR_FALSE};

     if (c) {
         PRUint32 i;
         nssDecodedCert *dc = c->decoding;  <---- Crash here
 }}}
 c points to nowhere, and it's not NULL it seems.
 Any known fixed bugs that would to fix that too or it's something new?
 Would it be triggered by some firefox patches?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8821#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online