[tor-bugs] #19400 [Applications/Tor Browser]: [Asan] Crash in js::AsmJSModule::deserialize / DeserializeSig

Mon Jun 13 10:12:13 UTC 2016

#19400: [Asan] Crash in js::AsmJSModule::deserialize / DeserializeSig
---------------------------------------------+-----------------------------
 Reporter:  cypherpunks                      |          Owner:  tbb-team
     Type:  defect                           |         Status:
 Priority:  Very High                        |  needs_information
Component:  Applications/Tor Browser         |      Milestone:
 Severity:  Critical                         |        Version:
 Keywords:  tbb-crash, TorBrowserTeam201606  |     Resolution:
Parent ID:                                   |  Actual Points:
 Reviewer:                                   |         Points:
                                             |        Sponsor:
---------------------------------------------+-----------------------------

Comment (by cypherpunks):

 Replying to [comment:4 gk]:
 > 3) If you are adventurous, testing a vanilla Firefox ASan build
 (https://ftp.mozilla.org/pub/firefox/tinderbox-builds/mozilla-central-
 linux64-asan/1450090940/) would be pretty interesting. Pointing it to your
 local tor should be all that is needed to reach facebookcorewwwi.onion.

 That doesn't reproduce the crash. But this FF version is ~6 months old,
 the change was probably introduced between FF 45 and FF ESR 45.2 (see
 comment #5)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19400#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online