[tor-bugs] #10761 [Firefox Patch Issues]: Restoring windows and tabs causes crash on exit

[Tor Bug Tracker & Wiki]

#10761: Restoring windows and tabs causes crash on exit
--------------------------------------+-----------------------
     Reporter:  cypherpunks           |      Owner:  mikeperry
         Type:  defect                |     Status:  new
     Priority:  normal                |  Milestone:
    Component:  Firefox Patch Issues  |    Version:
   Resolution:                        |   Keywords:  tbb-crash
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+-----------------------

Comment (by cypherpunks):

 Then this bug more complex than it should be.
 Here theory about how it happens (but not why):
 [https://mxr.mozilla.org/mozilla-
 central/source/security/nss/lib/ckfw/wrap.c#139 NSSCKFWC_Initialize]
 called by [https://mxr.mozilla.org/mozilla-
 central/source/security/nss/lib/pk11wrap/pk11load.c#196
 secmod_ModuleInit]. If initialize failed then it tries to reload module
 several times. (during tests secmod_ModuleInit was called 3 times then it
 tried to call NSSCKFWC_Initialize twice if nssCKFWInstance_Create failure
 was imitated). If NSSCKFWC_Initialize failed but initiated error_stack
 while allows next tries (no *pFwInstance filled), then next call do not
 re-initiates this anymore. If system unloads dll after failure and tries
 to load it with another image base address then pointer to thunk with
 PR_Free will be invalid.
 If HTTPS-Everywhere triggers failure for one of tries of nssckbi module
 init, and win7 64 bit loads dll to new address every new try then crash on
 exit happens. Question why HTTPS-Everywhere triggers dll load failure at
 all.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10761#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online