[tor-bugs] #17395 [Tor Browser]: Crash on OS X 10.11 Tor Browser 5.0.3

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Feb 18 11:23:02 UTC 2016 

#17395: Crash on OS X 10.11 Tor Browser 5.0.3
-------------------------+-----------------------------------
 Reporter:  sordid       |          Owner:
     Type:  defect       |         Status:  needs_information
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Major        |     Resolution:
 Keywords:  tbb-crash    |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+-----------------------------------

Comment (by cypherpunks):

 {{{
 Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
 0 libobjc.A.dylib 0x00007fff8d7f3d5d objc_msgSend + 29
 1 com.apple.Foundation 0x00007fff9423a7e4 -[NSConcreteMapTable
 objectForKey:] + 42
 2 com.apple.UIFoundation 0x00007fff9cbf289d +[NSFontTypefaceInfo
 typefaceInfoForPostscriptName:options:] + 155
 3 com.apple.UIFoundation 0x00007fff9cbf9677 NSGetMetaFontInstance + 1099
 4 XUL 0x000000010237c615 0x101bd5000 + 8025621
 }}}
 The same bt [https://blog.torproject.org/blog/tor-
 browser-552-released#comment-156723 reported] for 5.5.2
 {{{
 Process: firefox [625]
 Path: /Applications/TorBrowser.app/Contents/MacOS/firefox
 Identifier: org.mozilla.tor browser
 Version: 5.5.2 (3800.1.1)
 Code Type: X86-64 (Native)
 Parent Process: ??? [1]
 Responsible: firefox [625]
 User ID: 501

 Date/Time: 2016-02-16 15:25:17.054 +0300
 OS Version: Mac OS X 10.11.3 (15D21)
 Report Version: 11
 Anonymous UUID: 2C9A98D3-FE93-2258-3E15-896AF08E8552

 Sleep/Wake UUID: 5CF91AA6-7602-434B-B8CA-915A87EAC831

 Time Awake Since Boot: 5800 seconds
 Time Since Wake: 2700 seconds

 System Integrity Protection: enabled

 Crashed Thread: 0 Dispatch queue: com.apple.main-thread

 Exception Type: EXC_BAD_ACCESS (SIGSEGV)
 Exception Codes: KERN_INVALID_ADDRESS at 0x00000ab000000015
 Exception Note: EXC_CORPSE_NOTIFY

 VM Regions Near 0xab000000015:
 mapped file 0000000125500000-000000012576a000 [ 2472K] rw-/rwx SM=COW
 -->
 STACK GUARD 0000700000000000-0000700000001000 [ 4K] ---/rwx SM=NUL stack
 guard for thread 1

 Application Specific Information:
 objc_msgSend() selector name: hash

 Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
 0 libobjc.A.dylib 0x00007fff95b7d4e9 objc_msgSend + 41
 1 com.apple.Foundation 0x00007fff8ef2a4d8 -[NSConcreteMapTable
 objectForKey:] + 42
 2 com.apple.UIFoundation 0x00007fff916a7809 +[__NSFontTypefaceInfo
 typefaceInfoForPostscriptName:options:] + 155
 3 com.apple.UIFoundation 0x00007fff916ae56f __NSGetMetaFontInstance + 983
 4 XUL 0x0000000102a7d425 0x1022d6000 + 8025125

 Thread 1:
 0 libsystem_kernel.dylib 0x00007fff980a36de __workq_kernreturn + 10
 1 libsystem_pthread.dylib 0x00007fff993af729 _pthread_wqthread + 1283
 2 libsystem_pthread.dylib 0x00007fff993ad365 start_wqthread + 13

 Thread 2:: Dispatch queue: com.apple.libdispatch-manager
 0 libsystem_kernel.dylib 0x00007fff980a3ff6 kevent_qos + 10
 1 libdispatch.dylib 0x00007fff99af8099 _dispatch_mgr_invoke + 216
 2 libdispatch.dylib 0x00007fff99af7d01 _dispatch_mgr_thread + 52

 Thread 3:
 0 libsystem_kernel.dylib 0x00007fff980a36de __workq_kernreturn + 10
 1 libsystem_pthread.dylib 0x00007fff993af729 _pthread_wqthread + 1283
 2 libsystem_pthread.dylib 0x00007fff993ad365 start_wqthread + 13

 Thread 4:
 0 libsystem_kernel.dylib 0x00007fff980a36de __workq_kernreturn + 10
 1 libsystem_pthread.dylib 0x00007fff993af729 _pthread_wqthread + 1283
 2 libsystem_pthread.dylib 0x00007fff993ad365 start_wqthread + 13

 Thread 5:: Gecko_IOThread
 0 libsystem_kernel.dylib 0x00007fff980a3fc6 kevent + 10
 1 XUL 0x0000000102540bd1 0x1022d6000 + 2534353

 Thread 6:: Socket Thread
 0 libsystem_kernel.dylib 0x00007fff980a3176 __select + 10
 1 libnss3.dylib 0x00000001021ec565 poll + 485

 Thread 7:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 8:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 9:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 10:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 11:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 12:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 13:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 14:: Analysis Helper
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 15:
 0 libsystem_kernel.dylib 0x00007fff9809d386 mach_msg_trap + 10
 1 libsystem_kernel.dylib 0x00007fff9809c7c7 mach_msg + 55
 2 XUL 0x0000000104462db0 0x1022d6000 + 35179952

 Thread 16:: JS Watchdog
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 17:: Hang Monitor
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 18:
 0 libsystem_kernel.dylib 0x00007fff980a36de __workq_kernreturn + 10
 1 libsystem_pthread.dylib 0x00007fff993af729 _pthread_wqthread + 1283
 2 libsystem_pthread.dylib 0x00007fff993ad365 start_wqthread + 13

 Thread 19:
 0 libsystem_kernel.dylib 0x00007fff980a36de __workq_kernreturn + 10
 1 libsystem_pthread.dylib 0x00007fff993af729 _pthread_wqthread + 1283
 2 libsystem_pthread.dylib 0x00007fff993ad365 start_wqthread + 13

 Thread 20:: Timer
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff699 PR_WaitCondVar + 249

 Thread 21:: Cache2 I/O
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 22:
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 23:: Cert Verify
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 24:: mozStorage #1
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 25:: Proxy R~olution
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 26:: SSL Cert #1
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ffd0f PR_Wait + 303

 Thread 27:: RunProcess
 0 libsystem_kernel.dylib 0x00007fff980a367e __wait4 + 10
 1 XUL 0x00000001023621fe 0x1022d6000 + 573950

 Thread 28:: IPDL Background
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 29:: ImageIO
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 30:: ImageDecoder #1
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ffd0f PR_Wait + 303

 Thread 31:: Compositor
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 XUL 0x0000000102542aa8 0x1022d6000 + 2542248
 3 ??? 0x8000000000000000 0 + 9223372036854775808

 Thread 32:: ImageBridgeChild
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 XUL 0x0000000102542aa8 0x1022d6000 + 2542248
 3 ??? 0x8000000000000000 0 + 9223372036854775808

 Thread 33:: com.apple.NSEventThread
 0 libsystem_kernel.dylib 0x00007fff9809d386 mach_msg_trap + 10
 1 libsystem_kernel.dylib 0x00007fff9809c7c7 mach_msg + 55
 2 com.apple.CoreFoundation 0x00007fff8f6d7624 __CFRunLoopServiceMachPort +
 212
 3 com.apple.CoreFoundation 0x00007fff8f6d6aec __CFRunLoopRun + 1356
 4 com.apple.CoreFoundation 0x00007fff8f6d6338 CFRunLoopRunSpecific + 296
 5 com.apple.AppKit 0x00007fff8c586065 _NSEventThread + 149
 6 libsystem_pthread.dylib 0x00007fff993afc13 _pthread_body + 131
 7 libsystem_pthread.dylib 0x00007fff993afb90 _pthread_start + 168
 8 libsystem_pthread.dylib 0x00007fff993ad375 thread_start + 13

 Thread 34:: DOM Worker
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 35:
 0 libsystem_kernel.dylib 0x00007fff9809d386 mach_msg_trap + 10
 1 libsystem_kernel.dylib 0x00007fff9809c7c7 mach_msg + 55
 2 XUL 0x0000000104462295 0x1022d6000 + 35177109

 Thread 36:: ImageDecoder #2
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ffd0f PR_Wait + 303

 Thread 37:: ImageDecoder #3
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ffd0f PR_Wait + 303

 Thread 38:: MediaManager
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 39:: StreamTrans #11
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ffd0f PR_Wait + 303

 Thread 40:: Cache I/O
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 41:: mozStorage #2
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 42:: mozStorage #3
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 43:: localStorage DB
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ff607 PR_WaitCondVar + 103

 Thread 44:: mozStorage #4
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 45:: SSL Cert #2
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767
 2 libnss3.dylib 0x00000001021ffd0f PR_Wait + 303

 Thread 46:: URL Classifier
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 47:: HTML5 Parser
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 48:: mozStorage #5
 0 libsystem_kernel.dylib 0x00007fff980a2eb2 __psynch_cvwait + 10
 1 libsystem_pthread.dylib 0x00007fff993b0150 _pthread_cond_wait + 767

 Thread 0 crashed with X86 Thread State (64-bit):
 rax: 0x0000000000000008 rbx: 0x000000010079a9a0 rcx: 0x0000000000000000
 rdx: 0x00007fff5fbf4d80
 rdi: 0x000000010079a9a0 rsi: 0x00007fff8fac806a rbp: 0x00007fff5fbf4d70
 rsp: 0x00007fff5fbf4d28
 r8: 0x0000000000000000 r9: 0x0000000000000000 r10: 0x00000ab000000015 r11:
 0x0000000100000000
 r12: 0x29004e90cd1b0173 r13: 0x000000010079a9a0 r14: 0x00007fff78a3e0b8
 r15: 0x000000010bac4c70
 rip: 0x00007fff95b7d4e9 rfl: 0x0000000000010202 cr2: 0x00000001160980ac

 Logical CPU: 0
 Error Code: 0x02000131
 Trap Number: 133
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17395#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tor-bugs mailing list