[tor-bugs] #17097 [Tor Browser]: Print dialog sometimes causes OS X Tor Browser to crash
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Sep 17 19:43:43 UTC 2015
#17097: Print dialog sometimes causes OS X Tor Browser to crash
---------------------------------------------+--------------------------
Reporter: arthuredelstein | Owner: tbb-team
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor Browser | Version:
Keywords: tbb-crash, TorBrowserTeam201509 | Actual Points:
Parent ID: | Points:
---------------------------------------------+--------------------------
On OS X, when I launch the Print dialog (using command+P) and then cancel
(by hitting ESC) a few times, I can get Tor Browser 5.0.2 to crash. Here's
the stack trace:
{{{
* thread #1: tid = 0x1f6347, 0x0000000101f32460
XUL`nsCOMPtr<nsIDOMWindow>::operator->(this=0x00007fff5fbfc668) const + 96
at nsCOMPtr.h:697, queue = 'com.apple.main-thread, stop reason =
EXC_BAD_ACCESS (code=1, address=0x0)
frame #0: 0x0000000101f32460
XUL`nsCOMPtr<nsIDOMWindow>::operator->(this=0x00007fff5fbfc668) const + 96
at nsCOMPtr.h:697
694
695 T* operator->() const MOZ_NO_ADDREF_RELEASE_ON_RETURN
696 {
-> 697 MOZ_ASSERT(mRawPtr != 0,
698 "You can't dereference a NULL nsCOMPtr with
operator->().");
699 return get();
700 }
(lldb) bt
* thread #1: tid = 0x1f6347, 0x0000000101f32460
XUL`nsCOMPtr<nsIDOMWindow>::operator->(this=0x00007fff5fbfc668) const + 96
at nsCOMPtr.h:697, queue = 'com.apple.main-thread, stop reason =
EXC_BAD_ACCESS (code=1, address=0x0)
frame #0: 0x0000000101f32460
XUL`nsCOMPtr<nsIDOMWindow>::operator->(this=0x00007fff5fbfc668) const + 96
at nsCOMPtr.h:697
frame #1: 0x00000001033f2b21
XUL`ThirdPartyUtil::GetFirstPartyURIInternal(this=0x0000000117104550,
aChannel=0x0000000000000000, aNode=0x0000000128659000, aLogErrors=true,
aOutput=0x00007fff5fbfc898) + 1809 at ThirdPartyUtil.cpp:651
frame #2: 0x00000001033f2404
XUL`ThirdPartyUtil::GetFirstPartyURI(this=0x0000000117104550,
aChannel=0x0000000000000000, aNode=0x0000000128659000,
aOutput=0x00007fff5fbfc898) + 52 at ThirdPartyUtil.cpp:575
frame #3: 0x00000001033f238e
XUL`ThirdPartyUtil::GetFirstPartyIsolationURI(this=0x0000000117104550,
aChannel=0x0000000000000000, aNode=0x0000000128659000,
aOutput=0x00007fff5fbfc898) + 174 at ThirdPartyUtil.cpp:561
frame #4: 0x00000001033f01e3
XUL`ThirdPartyUtil::GetFirstPartyHost(aChannel=0x0000000000000000,
aDocument=0x0000000128659000, aResult=0x00007fff5fbfc958) + 163 at
ThirdPartyUtil.cpp:47
frame #5: 0x000000010344a48a
XUL`ThirdPartyUtil::GetFirstPartyHost(aDocument=0x0000000128659000,
aResult=0x00007fff5fbfc958) + 42 at ThirdPartyUtil.h:36
frame #6: 0x000000010348f7c5
XUL`nsDocument::cycleCollection::Unlink(this=0x000000010a2f2a80,
p=0x0000000128659000) + 1237 at nsDocument.cpp:2166
frame #7: 0x000000010474c2cd
XUL`nsHTMLDocument::cycleCollection::Unlink(this=0x000000010a2f2a80,
p=0x0000000128659000) + 61 at nsHTMLDocument.cpp:203
frame #8: 0x0000000101e1aad2
XUL`nsCycleCollector::CollectWhite(this=0x0000000112097000) + 882 at
nsCycleCollector.cpp:3297
frame #9: 0x0000000101e1c1d6
XUL`nsCycleCollector::Collect(this=0x0000000112097000, aCCType=SliceCC,
aBudget=0x00007fff5fbfcc18, aManualListener=0x0000000000000000,
aPreferShorterSlices=false) + 534 at nsCycleCollector.cpp:3648
frame #10: 0x0000000101e1e40a
XUL`nsCycleCollector_collectSlice(budget=0x00007fff5fbfcc18,
aPreferShorterSlices=false) + 298 at nsCycleCollector.cpp:4249
frame #11: 0x0000000103550dbd
XUL`nsJSContext::RunCycleCollectorSlice() + 493 at
nsJSEnvironment.cpp:1533
frame #12: 0x00000001035510ff
XUL`ICCTimerFired(aTimer=0x0000000113c239a0, aClosure=0x0000000000000000)
+ 127 at nsJSEnvironment.cpp:1591
frame #13: 0x0000000101f0487a
XUL`nsTimerImpl::Fire(this=0x0000000113c239a0) + 986 at
nsTimerImpl.cpp:631
frame #14: 0x0000000101f04c91
XUL`nsTimerEvent::Run(this=0x00000001172a72f0) + 209 at
nsTimerImpl.cpp:724
frame #15: 0x0000000101eff653
XUL`nsThread::ProcessNextEvent(this=0x000000010044e7c0, aMayWait=false,
aResult=0x00007fff5fbfcf83) + 1699 at nsThread.cpp:855
frame #16: 0x0000000101f57e2b
XUL`NS_ProcessPendingEvents(aThread=0x000000010044e7c0, aTimeout=20) + 171
at nsThreadUtils.cpp:207
frame #17: 0x0000000105103279
XUL`nsBaseAppShell::NativeEventCallback(this=0x00000001125e70c0) + 201 at
nsBaseAppShell.cpp:98
frame #18: 0x000000010517d3c1
XUL`nsAppShell::ProcessGeckoEvents(aInfo=0x00000001125e70c0) + 433 at
nsAppShell.mm:378
frame #19: 0x00007fff8b9835b1
CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
+ 17
frame #20: 0x00007fff8b974c62 CoreFoundation`__CFRunLoopDoSources0 +
242
frame #21: 0x00007fff8b9743ef CoreFoundation`__CFRunLoopRun + 831
frame #22: 0x00007fff8b973e75 CoreFoundation`CFRunLoopRunSpecific +
309
frame #23: 0x00007fff91922a0d HIToolbox`RunCurrentEventLoopInMode +
226
frame #24: 0x00007fff919227b7 HIToolbox`ReceiveNextEventCommon + 479
frame #25: 0x00007fff919225bc
HIToolbox`_BlockUntilNextEventMatchingListInModeWithFilter + 65
frame #26: 0x00007fff8f04724e AppKit`_DPSNextEvent + 1434
frame #27: 0x00007fff8f04689b AppKit`-[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 122
frame #28: 0x000000010517bff7 XUL`-[GeckoNSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:](self=0x0000000100405980,
_cmd=0x00007fff8fa7a5c3, mask=18446744073709551615,
expiration=0x422d63c37f00000d, mode=0x00007fff758c3d00, flag='\x01') + 119
at nsAppShell.mm:120
frame #29: 0x00007fff8f03a99c AppKit`-[NSApplication run] + 553
frame #30: 0x000000010517dd6c
XUL`nsAppShell::Run(this=0x00000001125e70c0) + 172 at nsAppShell.mm:653
frame #31: 0x0000000105d9d55c
XUL`nsAppStartup::Run(this=0x0000000113c76f60) + 156 at
nsAppStartup.cpp:281
frame #32: 0x0000000105e49130
XUL`XREMain::XRE_mainRun(this=0x00007fff5fbfef50) + 5104 at
nsAppRunner.cpp:4444
frame #33: 0x0000000105e49a6e
XUL`XREMain::XRE_main(this=0x00007fff5fbfef50, argc=5,
argv=0x00007fff5fbff8a8, aAppData=0x00007fff5fbff230) + 1006 at
nsAppRunner.cpp:4524
frame #34: 0x0000000105e49ebd XUL`XRE_main(argc=5,
argv=0x00007fff5fbff8a8, aAppData=0x00007fff5fbff230, aFlags=0) + 77 at
nsAppRunner.cpp:4743
frame #35: 0x0000000100001d66 firefox`do_main(argc=5,
argv=0x00007fff5fbff8a8, xreDirectory=0x0000000100420100) + 1750 at
nsBrowserApp.cpp:294
frame #36: 0x00000001000011f1 firefox`main(argc=5,
argv=0x00007fff5fbff8a8) + 321 at nsBrowserApp.cpp:667
frame #37: 0x0000000100000c54 firefox`start + 52
}}}
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17097>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list