[tor-bugs] #18778 [Applications/Tor Browser]: TBB hangs with 100% CPU when cancelling ftp download or http channel Listener OnDataAvailable contract violation

[Tor Bug Tracker & Wiki]

#18778: TBB hangs with 100% CPU when cancelling ftp download or http channel
Listener OnDataAvailable contract violation
--------------------------------------+--------------------------
 Reporter:  bugzilla                  |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  fixed
 Keywords:  tbb-crash                 |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by traumschule):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Can't reproduce a crash with 8.0.2, log for "Safest":
 {{{
 Content Security Policy: Couldn’t process unknown directive ‘report-to’
 (unknown)
 Loading failed for the <script> with source
 “https://gcc.gnu.org/bugzilla/data/assets/7aea391f77d255cdd754e18ddbf1133b.js?1507639999”.
 attachment.cgi:15
 Loading failed for the <script> with source
 “https://gcc.gnu.org/bugzilla/data/assets/2e6e421b95bc76c273c65f113df06e10.js?1507639999”.
 attachment.cgi:65
 Content Security Policy: The page’s settings blocked the loading of a
 resource at
 https://gcc.gnu.org/bugzilla/data/assets/7aea391f77d255cdd754e18ddbf1133b.js?1507639999
 (“script-src”). (unknown)
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source:
     <!--
         YAHOO.namespace('bugzi....
 }}}
 and with js enabled
 {{{
 Content Security Policy: The page’s settings blocked the loading of a
 resource at
 https://gcc.gnu.org/bugzilla/data/assets/2e6e421b95bc76c273c65f113df06e10.js?1507639999
 (“script-src”). (unknown)
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source: onsubmit attribute on FORM
 element. attachment.cgi
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source:
       if (history && history.replaceSta.... attachment.cgi:108
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source: onclick attribute on A element.
 attachment.cgi
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source: onclick attribute on BUTTON
 element. attachment.cgi
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source:
               YAHOO.util.Dom.removeClas.... attachment.cgi:408
 Content Security Policy: The page’s settings blocked the loading of a
 resource at self (“script-src”). Source:
       if (history && history.replaceSta.... attachment.cgi:453
 Loading failed for the <script> with source
 “https://gcc.gnu.org/bugzilla/data/assets/7aea391f77d255cdd754e18ddbf1133b.js?1507639999”.
 attachment.cgi:15
 Loading failed for the <script> with source
 “https://gcc.gnu.org/bugzilla/data/assets/2e6e421b95bc76c273c65f113df06e10.js?1507639999”.
 attachment.cgi:65
 }}}
 For "Standard" nothing is logged.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18778#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online