[tor-bugs] #19857 [Applications/Tor Browser]: Tor Browser hardened (6.5a2) crashes after update

[Tor Bug Tracker & Wiki]

#19857: Tor Browser hardened (6.5a2) crashes after update
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-crash, tbb-regression,           |  Actual Points:
  TorBrowserTeam201608                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Old description:

> STR:
>
> 1) Download 6.5a1-hardened
> 2) Download the corresponding debug files and move `Debug` to
> `Browser/.debug`
> 3) Start 6.5a1-hardened as usual and update
> 4) After restart the browser window is visible shortly but then Tor
> Browser crashes with
> {{{
> ASAN:SIGSEGV
> =================================================================
> ==7246==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000
> (pc 0x7faa929b5d27 bp 0x7faa9bf89170 sp 0x7faa9bf89040 T4)
> SRAT init
> SRAT warning: cannot find Memory Layout File. Stack trace will be
> probably wrong.
> ASAN:SIGSEGV
> ==7246==AddressSanitizer: while reporting a bug found another one.
> Ignoring.
> }}}
>
> Starting again works and not moving the debug files into `Browser` +
> updating is fine, too.

New description:

 STR:

 1) Download 6.5a1-hardened
 2) Download the corresponding debug files and move `Debug/Browser` to
 `Browser/.debug`
 3) Start 6.5a1-hardened as usual and update
 4) After restart the browser window is visible shortly but then Tor
 Browser crashes with
 {{{
 ASAN:SIGSEGV
 =================================================================
 ==7246==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000
 (pc 0x7faa929b5d27 bp 0x7faa9bf89170 sp 0x7faa9bf89040 T4)
 SRAT init
 SRAT warning: cannot find Memory Layout File. Stack trace will be probably
 wrong.
 ASAN:SIGSEGV
 ==7246==AddressSanitizer: while reporting a bug found another one.
 Ignoring.
 }}}

 Starting again works and not moving the debug files into `Browser` +
 updating is fine, too.

--

Comment (by gk):

 The update from 6.0.2 to 6.0.3 and 6.5a1 to 6.5a2 is not affected. Thus, I
 am wondering whether this is due to selfrando coming into place. I guess
 #19725 would be the only thing that came to mind somehow causing this
 looking at the 6.5a2-hardened changelog. But then I'd suspect the update
 from 6.5a1 to 6.5a2 to crash as well. So, hm.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19857#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online