[tor-bugs] #17022 [Tor Browser]: Tor Browser segfault during JavaScript Garbage Collection on OS X

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 8 18:09:47 UTC 2015


#17022: Tor Browser segfault during JavaScript Garbage Collection on OS X
-------------------------+--------------------------
 Reporter:  teor         |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 A few seconds after I closed
 https://storm.torproject.org/shared/rE40JVMp_lgFiyAQ5LHInseRTAXLySYfk7ckGtKFtwG
 with a number of other tabs and windows open, Tor Browser crashed with a
 SIGSEGV.

 It appears to have occured during a JavaScript Garbage Collection on OS X.

 The most relevant parts of the crash log are below, I can provide the full
 log on request:

 {{{
 Process:               firefox [477]
 Path:                  /Applications/TorBr50.app/Contents/MacOS/firefox
 Identifier:            org.mozilla.tor browser
 Version:               5.0.2 (3800.1.1)
 Code Type:             X86-64 (Native)
 Parent Process:        ??? [1]
 Responsible:           firefox [477]
 ...
 OS Version:            Mac OS X 10.10.5 (14F27)

 ...

 Crashed Thread:        0  Dispatch queue: com.apple.main-thread

 Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
 Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000010cfc0a0

 VM Regions Near 0x10cfc0a0:
 -->
     __TEXT                 0000000100000000-0000000100003000 [   12K]
 r-x/rwx SM=COW  /Applications/TorBr50.app/Contents/MacOS/firefox

 Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
 0   XUL                                 0x0000000103a0486a
 JS::UnmarkGrayGCThingRecursively(JS::GCCellPtr) + 12810
 1   XUL                                 0x0000000103a0b695
 JS::UnmarkGrayGCThingRecursively(JS::GCCellPtr) + 41013
 2   XUL                                 0x0000000103a0100b
 js::IterateGrayObjects(JS::Zone*, void (*)(void*, JS::GCCellPtr), void*) +
 26027
 3   XUL                                 0x0000000103dc46ec
 JS_NondeterministicGetWeakMapKeys(JSContext*, JS::Handle<JSObject*>,
 JS::MutableHandle<JSObject*>) + 122332
 4   XUL                                 0x0000000103d6a501
 js::RemoveRawValueRoot(JSContext*, JS::Value*) + 39361
 5   XUL                                 0x0000000103d6c51e
 js::RemoveRawValueRoot(JSContext*, JS::Value*) + 47582
 6   XUL                                 0x0000000103d6e536
 js::RemoveRawValueRoot(JSContext*, JS::Value*) + 55798
 7   XUL                                 0x0000000103d6eb95
 js::RemoveRawValueRoot(JSContext*, JS::Value*) + 57429
 8   XUL                                 0x0000000103d6f0a1
 js::RemoveRawValueRoot(JSContext*, JS::Value*) + 58721
 9   XUL                                 0x000000010212abc9
 js::BaseProxyHandler::finalizeInBackground(JS::Value) const + 422761
 10  XUL                                 0x00000001018903d3
 XRE_AddJarManifestLocation + 42883
 11  XUL                                 0x0000000101890737
 XRE_AddJarManifestLocation + 43751
 12  XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 13  XUL                                 0x00000001018a8e10
 nsXPTCStubBase::Stub249() + 73008
 14  XUL                                 0x0000000102de7243
 mac_plugin_interposing_child_OnShowCursor + 1971059
 15  XUL                                 0x0000000102e298bc
 mac_plugin_interposing_child_OnShowCursor + 2243052
 16  com.apple.CoreFoundation            0x00007fff8a8a4a01
 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
 17  com.apple.CoreFoundation            0x00007fff8a896b8d
 __CFRunLoopDoSources0 + 269
 18  com.apple.CoreFoundation            0x00007fff8a8961bf __CFRunLoopRun
 + 927
 19  com.apple.CoreFoundation            0x00007fff8a895bd8
 CFRunLoopRunSpecific + 296
 20  com.apple.HIToolbox                 0x00007fff8bb8b56f
 RunCurrentEventLoopInMode + 235
 21  com.apple.HIToolbox                 0x00007fff8bb8b2ea
 ReceiveNextEventCommon + 431
 22  com.apple.HIToolbox                 0x00007fff8bb8b12b
 _BlockUntilNextEventMatchingListInModeWithFilter + 71
 23  com.apple.AppKit                    0x00007fff904618ab _DPSNextEvent +
 978
 24  com.apple.AppKit                    0x00007fff90460e58 -[NSApplication
 nextEventMatchingMask:untilDate:inMode:dequeue:] + 346
 25  XUL                                 0x0000000102e29002
 mac_plugin_interposing_child_OnShowCursor + 2240818
 26  com.apple.AppKit                    0x00007fff90456af3 -[NSApplication
 run] + 594
 27  XUL                                 0x0000000102e29ef3
 mac_plugin_interposing_child_OnShowCursor + 2244643
 28  XUL                                 0x00000001034081e4
 XRE_StartupTimelineRecord + 1844
 29  XUL                                 0x000000010344b7f4
 XRE_InitCommandLine + 14260
 30  XUL                                 0x000000010344bb1b
 XRE_InitCommandLine + 15067
 31  XUL                                 0x000000010344bed0 XRE_main + 240
 32  org.mozilla.tor browser             0x0000000100001668 0x100000000 +
 5736
 33  org.mozilla.tor browser             0x0000000100000c14 start + 52

 Thread 1:: Dispatch queue: com.apple.libdispatch-manager
 0   libsystem_kernel.dylib              0x00007fff8f90f232 kevent64 + 10
 1   libdispatch.dylib                   0x00007fff88a40a6a
 _dispatch_mgr_thread + 52

 Thread 2:: Gecko_IOThread
 0   libsystem_kernel.dylib              0x00007fff8f90f21a kevent + 10

 Thread 3:: Socket Thread
 0   libsystem_kernel.dylib              0x00007fff8f90e3fa __select + 10

 Thread 4:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 5:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 6:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 7:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 8:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 9:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 10:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 11:: Analysis Helper
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103a2aaef
 js::ProtoKeyToClass(JSProtoKey) + 16095
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 12:
 0   libsystem_kernel.dylib              0x00007fff8f9094de mach_msg_trap +
 10
 1   libsystem_kernel.dylib              0x00007fff8f90864f mach_msg + 55
 2   XUL                                 0x0000000103978a40
 JS::PerfMeasurement::canMeasureSomething() + 58448
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 13:: JS Watchdog
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 14:: Hang Monitor
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000101888e6c
 XRE_AddJarManifestLocation + 12828
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 15:: Timer
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe769 PR_WaitCondVar
 + 249
 2   XUL                                 0x000000010188a8b7
 XRE_AddJarManifestLocation + 19559
 3   XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 4   XUL                                 0x00000001018a8eb5
 nsXPTCStubBase::Stub249() + 73173
 5   XUL                                 0x0000000101a90379
 JS::CompileOptions::introductionScript() const + 1720377
 6   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 7   XUL                                 0x000000010188c83c
 XRE_AddJarManifestLocation + 27628
 8   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 9   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 10  libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 11  libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 16:: Cache2 I/O
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x000000010199fa7d
 JS::CompileOptions::introductionScript() const + 735037
 3   XUL                                 0x000000010199f8af
 JS::CompileOptions::introductionScript() const + 734575
 4   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 5   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 6   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 7   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 17:
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 18:: Cert Verify
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000103368f24
 mac_plugin_interposing_child_OnShowCursor + 7745620
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 19:: mozStorage #1
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 20:: Proxy R~olution
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 21:: RunProcess
 0   libsystem_kernel.dylib              0x00007fff8f90e902 __wait4 + 10

 Thread 22:: IPDL Background
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 23:: ImageIO
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 24:: Compositor
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   XUL                                 0x0000000101a6c078
 JS::CompileOptions::introductionScript() const + 1572152
 2   XUL                                 0x0000000101a6c1c2
 JS::CompileOptions::introductionScript() const + 1572482
 3   XUL                                 0x0000000101a7668f
 JS::CompileOptions::introductionScript() const + 1614671
 4   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 5   XUL                                 0x0000000101a7cb1d
 JS::CompileOptions::introductionScript() const + 1640413
 6   XUL                                 0x0000000101a6b227
 JS::CompileOptions::introductionScript() const + 1568487
 7   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 8   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 9   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 25:: ImageBridgeChild
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   XUL                                 0x0000000101a6c078
 JS::CompileOptions::introductionScript() const + 1572152
 2   XUL                                 0x0000000101a6c1c2
 JS::CompileOptions::introductionScript() const + 1572482
 3   XUL                                 0x0000000101a7668f
 JS::CompileOptions::introductionScript() const + 1614671
 4   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 5   XUL                                 0x0000000101a7cb1d
 JS::CompileOptions::introductionScript() const + 1640413
 6   XUL                                 0x0000000101a6b227
 JS::CompileOptions::introductionScript() const + 1568487
 7   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 8   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 9   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 26:
 0   libsystem_kernel.dylib              0x00007fff8f9094de mach_msg_trap +
 10
 1   libsystem_kernel.dylib              0x00007fff8f90864f mach_msg + 55
 2   com.apple.CoreFoundation            0x00007fff8a896eb4
 __CFRunLoopServiceMachPort + 212
 3   com.apple.CoreFoundation            0x00007fff8a89637b __CFRunLoopRun
 + 1371
 4   com.apple.CoreFoundation            0x00007fff8a895bd8
 CFRunLoopRunSpecific + 296
 5   com.apple.AppKit                    0x00007fff9052956b _NSEventThread
 + 137
 6   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 7   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 8   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 27:: DOM Worker
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000102cb4243
 mac_plugin_interposing_child_OnShowCursor + 713587
 3   XUL                                 0x0000000102cb3b8d
 mac_plugin_interposing_child_OnShowCursor + 711869
 4   XUL                                 0x0000000102ca1dd0
 mac_plugin_interposing_child_OnShowCursor + 638720
 5   XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 6   XUL                                 0x00000001018a8eb5
 nsXPTCStubBase::Stub249() + 73173
 7   XUL                                 0x0000000101a90379
 JS::CompileOptions::introductionScript() const + 1720377
 8   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 9   XUL                                 0x000000010188c83c
 XRE_AddJarManifestLocation + 27628
 10  libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 11  libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 12  libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 13  libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 28:
 0   libsystem_kernel.dylib              0x00007fff8f9094de mach_msg_trap +
 10
 1   libsystem_kernel.dylib              0x00007fff8f90864f mach_msg + 55
 2   XUL                                 0x0000000103977f25
 JS::PerfMeasurement::canMeasureSomething() + 55605
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 29:: MediaManager
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 30:: mozStorage #2
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 31:: mozStorage #3
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 32:: Cache I/O
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 33:: mozStorage #4
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 34:: localStorage DB
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000102b3a766
 mozilla_set_coreaudio_notification_runloop_if_needed + 560550
 3   XUL                                 0x0000000102b3975f
 mozilla_set_coreaudio_notification_runloop_if_needed + 556447
 4   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 5   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 6   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 7   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 35:: mozStorage #5
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 36:: URL Classifier
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 37:: HTML5 Parser
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 38:: DOM Worker
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006fe6d7 PR_WaitCondVar
 + 103
 2   XUL                                 0x0000000102cb4243
 mac_plugin_interposing_child_OnShowCursor + 713587
 3   XUL                                 0x0000000102cb3b8d
 mac_plugin_interposing_child_OnShowCursor + 711869
 4   XUL                                 0x0000000102ca1dd0
 mac_plugin_interposing_child_OnShowCursor + 638720
 5   XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 6   XUL                                 0x00000001018a8eb5
 nsXPTCStubBase::Stub249() + 73173
 7   XUL                                 0x0000000101a90379
 JS::CompileOptions::introductionScript() const + 1720377
 8   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 9   XUL                                 0x000000010188c83c
 XRE_AddJarManifestLocation + 27628
 10  libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 11  libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 12  libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 13  libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 39:
 0   libsystem_kernel.dylib              0x00007fff8f9094de mach_msg_trap +
 10
 1   libsystem_kernel.dylib              0x00007fff8f90864f mach_msg + 55
 2   XUL                                 0x0000000103977f25
 JS::PerfMeasurement::canMeasureSomething() + 55605
 3   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 4   libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 5   libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 6   libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 40:: Image Scaler
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 41:: mozStorage #6
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 42:: mozStorage #7
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10

 Thread 43:: SSL Cert #132
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006feddf PR_Wait + 303
 2   XUL                                 0x000000010188f02f
 XRE_AddJarManifestLocation + 37855
 3   XUL                                 0x000000010188f16a
 XRE_AddJarManifestLocation + 38170
 4   XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 5   XUL                                 0x00000001018a8eb5
 nsXPTCStubBase::Stub249() + 73173
 6   XUL                                 0x0000000101a90379
 JS::CompileOptions::introductionScript() const + 1720377
 7   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 8   XUL                                 0x000000010188c83c
 XRE_AddJarManifestLocation + 27628
 9   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 10  libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 11  libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 12  libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 44:
 0   libsystem_kernel.dylib              0x00007fff8f90e94a
 __workq_kernreturn + 10
 1   libsystem_pthread.dylib             0x00007fff8d3483dd start_wqthread
 + 13

 Thread 45:
 0   libsystem_kernel.dylib              0x00007fff8f90e94a
 __workq_kernreturn + 10
 1   libsystem_pthread.dylib             0x00007fff8d3483dd start_wqthread
 + 13

 Thread 46:: StreamT~ns #149
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006feddf PR_Wait + 303
 2   XUL                                 0x000000010188f02f
 XRE_AddJarManifestLocation + 37855
 3   XUL                                 0x000000010188f16a
 XRE_AddJarManifestLocation + 38170
 4   XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 5   XUL                                 0x00000001018a8eb5
 nsXPTCStubBase::Stub249() + 73173
 6   XUL                                 0x0000000101a9030d
 JS::CompileOptions::introductionScript() const + 1720269
 7   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 8   XUL                                 0x000000010188c83c
 XRE_AddJarManifestLocation + 27628
 9   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 10  libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 11  libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 12  libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 47:
 0   libsystem_kernel.dylib              0x00007fff8f90e94a
 __workq_kernreturn + 10
 1   libsystem_pthread.dylib             0x00007fff8d3483dd start_wqthread
 + 13

 Thread 48:: ImageDe~er #144
 0   libsystem_kernel.dylib              0x00007fff8f90e136 __psynch_cvwait
 + 10
 1   libnss3.dylib                       0x00000001006feddf PR_Wait + 303
 2   XUL                                 0x000000010188f02f
 XRE_AddJarManifestLocation + 37855
 3   XUL                                 0x000000010188f16a
 XRE_AddJarManifestLocation + 38170
 4   XUL                                 0x000000010188d690
 XRE_AddJarManifestLocation + 31296
 5   XUL                                 0x00000001018a8eb5
 nsXPTCStubBase::Stub249() + 73173
 6   XUL                                 0x0000000101a9030d
 JS::CompileOptions::introductionScript() const + 1720269
 7   XUL                                 0x0000000101a75a2c
 JS::CompileOptions::introductionScript() const + 1611500
 8   XUL                                 0x000000010188c83c
 XRE_AddJarManifestLocation + 27628
 9   libnss3.dylib                       0x00000001007009a8 0x100500000 +
 2099624
 10  libsystem_pthread.dylib             0x00007fff8d34b05a _pthread_body +
 131
 11  libsystem_pthread.dylib             0x00007fff8d34afd7 _pthread_start
 + 176
 12  libsystem_pthread.dylib             0x00007fff8d3483ed thread_start +
 13

 Thread 0 crashed with X86 Thread State (64-bit):
   rax: 0x0000000000000010  rbx: 0x0000000010c00002  rcx:
 0x0000000002180000  rdx: 0x0000000010c00000
   rdi: 0x0000000000000000  rsi: 0x0000000000000000  rbp:
 0x0000000000000505  rsp: 0x00007fff5fbfd690
    r8: 0x0000000000000001   r9: 0x0000000000000505  r10:
 0x0000000000000000  r11: 0x0000000000000246
   r12: 0x0000000108718f20  r13: 0x00000001218a0a80  r14:
 0x0000000010c00002  r15: 0x000000012df7c500
   rip: 0x0000000103a0486a  rfl: 0x0000000000010246  cr2:
 0x0000000010cfc0a0

 Logical CPU:     2
 Error Code:      0x00000004
 Trap Number:     14

 ...

 VM Region Summary:
 ReadOnly portion of Libraries: Total=290.4M resident=146.4M(50%)
 swapped_out_or_unallocated=144.0M(50%)
 Writable regions: Total=511.5M written=275.6M(54%) resident=430.8M(84%)
 swapped_out=0K(0%) unallocated=80.8M(16%)

 REGION TYPE                      VIRTUAL
 ===========                      =======
 Activity Tracing                   2048K
 CG backing stores                  15.0M
 CG image                            112K
 CG shared images                   1008K
 CoreGraphics                         60K
 CoreImage                             8K
 CoreUI image data                   244K
 Foundation                            4K
 Image IO                             32K
 Kernel Alloc Once                     8K
 MALLOC                             22.4M
 MALLOC (admin)                       32K
 Memory Tag 242                       12K
 Memory Tag 251                        8K
 OpenCL                               40K
 STACK GUARD                        56.2M
 Stack                              34.3M
 VM_ALLOCATE                       431.6M
 VM_ALLOCATE (reserved)              428K        reserved VM address space
 (unallocated)
 __DATA                             27.1M
 __IMAGE                             528K
 __LINKEDIT                         72.0M
 __TEXT                            218.4M
 __UNICODE                           552K
 mapped file                       328.4M
 shared memory                         4K
 ===========                      =======
 TOTAL                               1.2G
 TOTAL, minus reserved VM space      1.2G
 ...
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17022>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list