[tor-bugs] #23692 [Applications/Tor Browser Sandbox]: tabs crash in Sandboxed Tor Browser with Tor Browser 7.5.a5

[Tor Bug Tracker & Wiki]

#23692: tabs crash in Sandboxed Tor Browser with Tor Browser 7.5.a5
--------------------------------------------------+---------------------
     Reporter:  pege                              |      Owner:  yawning
         Type:  defect                            |     Status:  new
     Priority:  Medium                            |  Milestone:
    Component:  Applications/Tor Browser Sandbox  |    Version:
     Severity:  Normal                            |   Keywords:
Actual Points:                                    |  Parent ID:
       Points:                                    |   Reviewer:
      Sponsor:                                    |
--------------------------------------------------+---------------------
 After being updated to 7.5a5 tabs in Sandboxed Tor Browser (0.0.14-dev
 (35d5080)) keep crashing.

 Reproduce:
 • update to Tor Browser 7.5a5
 • open new tab
 • enter any address
 • tab crashes

 debug output:
 {{{
 2017/09/29 02:01:22 sandbox: X11: New connection: 5
 2017/09/29 02:01:22 sandbox: X11(5): Protocol 11.0
 2017/09/29 02:01:22 sandbox: X11(5): Auth: 18 | 2 | 16 | 0
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00001): QueryExtension: 'BIG-
 REQUESTS'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00005): QueryExtension:
 'XKEYBOARD'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00041): QueryExtension: 'RANDR'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00042): QueryExtension: 'Generic
 Event Extension'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00073): QueryExtension: 'XFIXES'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00075): QueryExtension:
 'Composite'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00077): QueryExtension: 'DAMAGE'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00079): QueryExtension: 'SHAPE'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00091): QueryExtension: 'SYNC'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00093): QueryExtension: 'SYNC'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00094): QueryExtension: 'MIT-
 SHM'
 2017/09/29 02:01:22 sandbox: X11(5): Scheduling QueryExtension for
 rejection: 'MIT-SHM'
 2017/09/29 02:01:22 sandbox: X11(5): Rep(#00094): Rewriting reply:
 QueryExtension rejection: MIT-SHM
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00095): QueryExtension:
 'XInputExtension'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00096): QueryExtension:
 'XInputExtension'
 2017/09/29 02:01:22 sandbox: X11(5): Req(#00098): QueryExtension:
 'XInputExtension'
 2017/09/29 02:01:22 sandbox: X11: New connection: 6
 2017/09/29 02:01:22 sandbox: X11(6): Protocol 11.0
 2017/09/29 02:01:22 sandbox: X11(6): Auth: 18 | 2 | 16 | 0
 2017/09/29 02:01:22 sandbox: X11(6): Req(#00001): QueryExtension: 'BIG-
 REQUESTS'
 2017/09/29 02:01:22 sandbox: X11(6): Req(#00005): QueryExtension:
 'XKEYBOARD'
 2017/09/29 02:01:22 firefox: Sandbox: prctl(PR_SET_NO_NEW_PRIVS) failed:
 Function not implemented
 2017/09/29 02:01:22 firefox: [Parent 3] WARNING: pipe error (64):
 Connection reset by peer: file /var/tmp/build/firefox-
 0a9793458e9d/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 322
 2017/09/29 02:01:22 firefox: [Parent 3] WARNING: pipe error (66):
 Connection reset by peer: file /var/tmp/build/firefox-
 0a9793458e9d/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 322
 2017/09/29 02:01:22 firefox: ###!!! [Parent][MessageChannel] Error:
 (msgtype=0x2C0086,name=PBrowser::Msg_Destroy) Channel error: cannot
 send/recv
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23692>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online