[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #28751 [Applications]: TB 8.5a5 Sig 11 core dump



#28751: TB 8.5a5 Sig 11 core dump
-------------------------+------------------------------
 Reporter:  jb.1234abcd  |          Owner:  (none)
     Type:  defect       |         Status:  new
 Priority:  Medium       |      Component:  Applications
  Version:               |       Severity:  Normal
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+------------------------------
 Arch Linux
 tor-browser-linux64-8.5a5_en-US

 Just opened e.g. a TB default home site https://www.torproject.org/
 and then closed TB, and the core dump happened.
 I repeated it twice. No other application was open (no memory stress).
 So, we know that it is repeatable and it happens on TB close.
 Unfortunately I did not have debug symbols installed.

 Run 1:
 $ coredumpctl gdb 3895
            PID: 3895 (firefox.real)
            UID: 1000 (jb)
            GID: 1000 (jb)
         Signal: 11 (SEGV)
      Timestamp: Thu 2018-12-06 09:00:14 CET (30min ago)
   Command Line: ./firefox.real --class Tor Browser -profile
 TorBrowser/Data/Browser/profile.default
     Executable: /home/jb/tor-browser_en-US/Browser/firefox.real
  Control Group: /user.slice/user-1000.slice/session-1.scope
           Unit: session-1.scope
          Slice: user-1000.slice
        Session: 1
      Owner UID: 1000 (jb)
        Boot ID: c163b6107a7944a88616613c95230e2d
     Machine ID: e464cf23e765494294ab3515a8e2efd0
       Hostname: myhost
        Storage:
 /var/lib/systemd/coredump/core.firefox\x2ereal.1000.c163b6107a7944a88616613c95230e2d.3895.1544083214000000.lz4
        Message: Process 3895 (firefox.real) of user 1000 dumped core.

                 Stack trace of thread 3895:
                 #0  0x00007f79102b825f raise (libpthread.so.0)
                 #1  0x00007f79074829ef n/a (libxul.so)

 GNU gdb (GDB) 8.2
 ...
 Reading symbols from /home/jb/tor-browser_en-US/Browser/firefox.real...(no
 debugging symbols found)...done.
 [New LWP 3895]
 [New LWP 3906]
 [New LWP 3909]
 [New LWP 4371]
 [New LWP 4482]
 [New LWP 3901]
 [New LWP 3902]
 [New LWP 3910]
 [New LWP 3943]
 [New LWP 4100]
 [New LWP 4267]
 [Thread debugging using libthread_db enabled]
 Using host libthread_db library "/usr/lib/libthread_db.so.1".
 Core was generated by `./firefox.real --class Tor Browser -profile
 TorBrowser/Data/Browser/profile.def'.
 Program terminated with signal SIGSEGV, Segmentation fault.
 #0  0x00007f79102b825f in raise () from /usr/lib/libpthread.so.0
 [Current thread is 1 (Thread 0x7f790fc78b80 (LWP 3895))]
 (gdb) bt
 #0  0x00007f79102b825f in raise () at /usr/lib/libpthread.so.0
 #1  0x00007f79074829ef in vpx_ssim_parms_8x8_sse2 () at /home/jb/tor-
 browser_en-US/Browser/libxul.so
 #2  0x0000000000000400 in  ()
 #3  0x0000000000000000 in  ()
 (gdb)
 (gdb) info reg
 rax            0x0                 0
 rbx            0xb                 11
 rcx            0x7f79102b825f      140157939057247
 rdx            0x0                 0
 rsi            0x7ffe0de72e20      140729131675168
 rdi            0x2                 2
 rbp            0xb                 0xb
 rsp            0x7ffe0de72e20      0x7ffe0de72e20
 r8             0x0                 0
 r9             0x7ffe0de72e20      140729131675168
 r10            0x8                 8
 r11            0x246               582
 r12            0x7ffe0de731b0      140729131676080
 r13            0x7ffe0de73080      140729131675776
 r14            0x7ffe0de731b0      140729131676080
 r15            0x7f78ed3ea000      140157353107456
 rip            0x7f79102b825f      0x7f79102b825f <raise+271>
 eflags         0x246               [ PF ZF IF ]
 cs             0x33                51
 ss             0x2b                43
 ds             0x0                 0
 es             0x0                 0
 fs             0x0                 0
 gs             0x0                 0
 (gdb)
 (gdb) thread apply all bt

 Thread 11 (Thread 0x7f78c3b52700 (LWP 4267)):
 #0  0x00007f790fe98c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007f78f7ee2673 in  () at /usr/lib/libpulse.so.0
 #2  0x00007f78f7ed3990 in pa_mainloop_poll () at /usr/lib/libpulse.so.0
 #3  0x00007f78f7ed3fe0 in pa_mainloop_iterate () at /usr/lib/libpulse.so.0
 #4  0x00007f78f7ed4091 in pa_mainloop_run () at /usr/lib/libpulse.so.0
 #5  0x00007f78f7ee25ae in  () at /usr/lib/libpulse.so.0
 #6  0x00007f78f7c819fc in  () at
 /usr/lib/pulseaudio/libpulsecommon-12.2.so
 #7  0x00007f79102ada9d in start_thread () at /usr/lib/libpthread.so.0
 #8  0x00007f790fea3b23 in clone () at /usr/lib/libc.so.6

 Thread 10 (Thread 0x7f78c8efe700 (LWP 4100)):
 #0  0x00007f790fe98c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007f78f7ee2673 in  () at /usr/lib/libpulse.so.0
 #2  0x00007f78f7ed3990 in pa_mainloop_poll () at /usr/lib/libpulse.so.0
 #3  0x00007f78f7ed3fe0 in pa_mainloop_iterate () at /usr/lib/libpulse.so.0
 #4  0x00007f78f7ed4091 in pa_mainloop_run () at /usr/lib/libpulse.so.0
 #5  0x00007f78f7ee25ae in  () at /usr/lib/libpulse.so.0
 #6  0x00007f78f7c819fc in  () at
 /usr/lib/pulseaudio/libpulsecommon-12.2.so
 #7  0x00007f79102ada9d in start_thread () at /usr/lib/libpthread.so.0
 #8  0x00007f790fea3b23 in clone () at /usr/lib/libc.so.6

 Thread 9 (Thread 0x7f78f1bff700 (LWP 3943)):
 #0  0x00007f790fe98c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007f78f7ee2673 in  () at /usr/lib/libpulse.so.0
 #2  0x00007f78f7ed3990 in pa_mainloop_poll () at /usr/lib/libpulse.so.0
 #3  0x00007f78f7ed3fe0 in pa_mainloop_iterate () at /usr/lib/libpulse.so.0
 #4  0x00007f78f7ed4091 in pa_mainloop_run () at /usr/lib/libpulse.so.0
 #5  0x00007f78f7ee25ae in  () at /usr/lib/libpulse.so.0
 #6  0x00007f78f7c819fc in  () at
 /usr/lib/pulseaudio/libpulsecommon-12.2.so
 #7  0x00007f79102ada9d in start_thread () at /usr/lib/libpthread.so.0
 #8  0x00007f790fea3b23 in clone () at /usr/lib/libc.so.6

 Thread 8 (Thread 0x7f78fe5fe700 (LWP 3910)):
 #0  0x00007f790fe9e4ed in syscall () at /usr/lib/libc.so.6
 #1  0x00007f790587165a in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #2  0x00007f78a730c080 in  ()
 --Type <RET> for more, q to quit, c to continue without paging--c
 #3  0x00007f790bb47370 in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #4  0x00007f78fe5fd6b0 in  ()
 #5  0x00007f78fe5fd560 in  ()
 #6  0x000000000000001c in  ()
 #7  0x00000000000076a2 in  ()
 #8  0x0000000007906d1d in  ()
 #9  0x00007f7904b6e60f in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #10 0x0000000000000001 in  ()
 #11 0x0000000000000000 in  ()

 Thread 7 (Thread 0x7f790319f700 (LWP 3902)):
 #0  0x00007f790fe98c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007f790e38bee0 in  () at /usr/lib/libglib-2.0.so.0
 #2  0x00007f790e38cf62 in g_main_loop_run () at /usr/lib/libglib-2.0.so.0
 #3  0x00007f790e621c28 in  () at /usr/lib/libgio-2.0.so.0
 #4  0x00007f790e3553eb in  () at /usr/lib/libglib-2.0.so.0
 #5  0x00007f79102ada9d in start_thread () at /usr/lib/libpthread.so.0
 #6  0x00007f790fea3b23 in clone () at /usr/lib/libc.so.6

 Thread 6 (Thread 0x7f7909454700 (LWP 3901)):
 #0  0x00007f790fe98c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007f790e38bee0 in  () at /usr/lib/libglib-2.0.so.0
 #2  0x00007f790e38bfce in g_main_context_iteration () at
 /usr/lib/libglib-2.0.so.0
 #3  0x00007f790e38c022 in  () at /usr/lib/libglib-2.0.so.0
 #4  0x00007f790e3553eb in  () at /usr/lib/libglib-2.0.so.0
 #5  0x00007f79102ada9d in start_thread () at /usr/lib/libpthread.so.0
 #6  0x00007f790fea3b23 in clone () at /usr/lib/libc.so.6

 Thread 5 (Thread 0x7f78b3351700 (LWP 4482)):
 #0  0x00007f790fe706a8 in nanosleep () at /usr/lib/libc.so.6
 #1  0x00007f790fe9bd08 in usleep () at /usr/lib/libc.so.6
 #2  0x00007f790837296a in vpx_ssim_parms_8x8_sse2 () at /home/jb/tor-
 browser_en-US/Browser/libxul.so
 #3  0x00007f78a7352ca0 in  ()
 #4  0x00007f78b3351658 in  ()
 #5  0x00007f790fc3711d in  () at /home/jb/tor-browser_en-
 US/Browser/libnspr4.so
 #6  0x0000000000000000 in  ()

 Thread 4 (Thread 0x7f78ade26700 (LWP 4371)):
 #0  0x00007f79102b8057 in recvmsg () at /usr/lib/libpthread.so.0
 #1  0x00007f79073ea21a in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #2  0x00007f790510fa43 in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #3  0x00007f78ade20c70 in  ()
 #4  0x00007f78ade22e90 in  ()
 #5  0x00007f78ade20cd0 in  ()
 #6  0x7ffffff500000000 in  ()
 #7  0x00007f78ade21e80 in  ()
 #8  0x00007f78ade20d70 in  ()
 #9  0x00007f78ade20d72 in  ()
 #10 0xffffffff00000000 in  ()
 #11 0x00007f789225ddc0 in  ()
 #12 0x0000000000000009 in  ()
 #13 0x0000000000000000 in  ()

 Thread 3 (Thread 0x7f78fe7ff700 (LWP 3909)):
 #0  0x00007f790fe9e4ed in syscall () at /usr/lib/libc.so.6
 #1  0x00007f790587165a in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #2  0x00007f78a730c3d8 in  ()
 #3  0x00007f790bb46f98 in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #4  0x00007f78fe7fe870 in  ()
 #5  0x00007f78a6831200 in  ()
 #6  0x0000000000000019 in  ()
 #7  0x0000000000007464 in  ()
 #8  0x00000000278c46ba in  ()
 #9  0x00007f7904b6e60f in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #10 0x0000000000000001 in  ()
 #11 0x0000000000000000 in  ()

 Thread 2 (Thread 0x7f78ff9ff700 (LWP 3906)):
 #0  0x00007f79102b3e5b in pthread_cond_timedwait@@GLIBC_2.3.2 () at
 /usr/lib/libpthread.so.0
 #1  0x00007f790fc38a33 in  () at /home/jb/tor-browser_en-
 US/Browser/libnspr4.so
 #2  0x00007f78ff9ff700 in  ()
 #3  0x0000000000000000 in  ()

 Thread 1 (Thread 0x7f790fc78b80 (LWP 3895)):
 #0  0x00007f79102b825f in raise () at /usr/lib/libpthread.so.0
 #1  0x00007f79074829ef in vpx_ssim_parms_8x8_sse2 () at /home/jb/tor-
 browser_en-US/Browser/libxul.so
 #2  0x0000000000000400 in  ()
 #3  0x0000000000000000 in  ()
 (gdb)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28751>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs