[tor-bugs] #20970 [Applications/Tor Browser Sandbox]: Firefox crashes if the security slider is left at the default on certain pages.

[Tor Bug Tracker & Wiki]

#20970: Firefox crashes if the security slider is left at the default on certain
pages.
----------------------------------------------+-------------------------
 Reporter:  yawning                           |          Owner:  yawning
     Type:  defect                            |         Status:  new
 Priority:  High                              |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------

Comment (by yawning):

 `sudo -E strace -ff -o /tmp/ff.trace -u yawning ./bin/sandboxed-tor-
 browser` reveals this is a NULL pointer deref somewhere in `libxul.so`.

 {{{
 mprotect(0x32130c10000, 4096, PROT_READ|PROT_WRITE) = 0
 mprotect(0x32130c10000, 4096, PROT_READ|PROT_EXEC) = 0
 mprotect(0x32130c10000, 4096, PROT_READ|PROT_WRITE) = 0
 mprotect(0x32130c10000, 4096, PROT_READ|PROT_EXEC) = 0
 mprotect(0x32130c10000, 4096, PROT_READ|PROT_WRITE) = 0
 mprotect(0x32130c10000, 4096, PROT_READ|PROT_EXEC) = 0
 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x3959d088b68}
 ---
 --- SIGSEGV {si_signo=SIGSEGV, si_code=SI_KERNEL, si_addr=NULL} ---
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20970#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online