[tor-bugs] #22269 [Applications/Tor Browser Sandbox]: TBB Sandbox crashed after finishing bootstrap

[Tor Bug Tracker & Wiki]

#22269: TBB Sandbox crashed after finishing bootstrap
----------------------------------------------+-------------------------
 Reporter:  leakedwiki                        |          Owner:  yawning
     Type:  defect                            |         Status:  closed
 Priority:  Medium                            |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:  wontfix
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------
Changes (by yawning):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 Unless there's other parts of Firefox that also puke when MIT-SHM isn't
 available, I assume this is the libcario bug described in
 https://bugzilla.mozilla.org/show_bug.cgi?id=1271100#c20

 There's mitigations/workarounds for this (that are also applied in newer
 firefox), by hooking `XQueryExtension` and `XShmQueryExtension`.  If your
 libcario2 is at version 1.14.8, then I suggest bringing it up with the
 Firefox developers.

 There likely isn't anything more I can do with this, since I don't have a
 system that can reproduce this anymore (the mitigations I applied were
 sufficient to squash it when I saw it, and it's a race condition so it's
 hard to reproduce reliably to begin with), and it's either a firefox or
 library bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22269#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online