[tor-bugs] #16495 [Tor Browser]: Tor Browser 5.0a3 crashes on nytimes.com with security level set to "High"

[Tor Bug Tracker & Wiki]

#16495: Tor Browser 5.0a3 crashes on nytimes.com with security level set to "High"
-------------------------+-------------------------------------------------
     Reporter:  gk       |      Owner:  tbb-team
         Type:  defect   |     Status:  new
     Priority:           |  Milestone:
  critical               |    Version:
    Component:  Tor      |   Keywords:  tbb-crash, tbb-5.0a,
  Browser                |  TorBrowserTeam201507
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mcs):

 I can sometimes (but not always) reproduce this on an old 32-bit Linux
 system.  I wonder if different content is loaded when certain exit nodes
 are used, leading to the "sometimes it crashes, sometimes it doesn't"
 behavior we are seeing?

 Like other people, I have not been able to get the separate debug symbol
 method to work at all
 (https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#UsingDebugSymbols)

 gk's stack does not look familiar to me.  It is deep in CSS and
 unfortunately gdb was not able to produce a complete stack.

 Kathy and I will not have much of an opportunity to debug this over the
 next few days, so I hope someone else has time.  Does it make sense to
 toggle the prefs. that are tied to the security slider one at a time to
 see which pref. (and therefore perhaps which patch) is the culprit?  My
 bet is on the SVG patch again but I do not know if any SVG content is
 involved.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16495#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online