[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #28606 [Applications]: TB 8.5a4 Sig 11 core dump

To: undisclosed-recipients: ;
Subject: [tor-bugs] #28606 [Applications]: TB 8.5a4 Sig 11 core dump
From: "Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>
Date: Sat, 24 Nov 2018 08:43:26 -0000
Auto-submitted: auto-generated
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 24 Nov 2018 03:43:38 -0500
List-archive: <http://lists.torproject.org/pipermail/tor-bugs/>
List-help: <mailto:tor-bugs-request@lists.torproject.org?subject=help>
List-id: "auto: Tor bug tracker status mails" <tor-bugs.lists.torproject.org>
List-post: <mailto:tor-bugs@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=unsubscribe>
Reply-to: no-reply@xxxxxxxxxxxxxx, tor-assistants@xxxxxxxxxxxxxx
Sender: "tor-bugs" <tor-bugs-bounces@xxxxxxxxxxxxxxxxxxxx>

#28606: TB 8.5a4 Sig 11 core dump
-------------------------+------------------------------
 Reporter:  jb.1234abcd  |          Owner:  (none)
     Type:  defect       |         Status:  new
 Priority:  High         |      Component:  Applications
  Version:               |       Severity:  Normal
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+------------------------------
 Arch Linux
 tor-browser-linux64-8.5a4_en-US
 Full core dump file (*.lz4) is available as 115MB file on request.
 Not reproducible.

 $ coredumpctl gdb 3718
            PID: 3718 (firefox.real)
            UID: 1000 (jb)
            GID: 1000 (jb)
         Signal: 11 (SEGV)
      Timestamp: Fri 2018-11-23 20:25:05 CET (12h ago)
   Command Line: ./firefox.real --class Tor Browser -profile
 TorBrowser/Data/Browser/profile.default
     Executable: /home/jb/tor-browser_en-US/Browser/firefox.real
  Control Group: /user.slice/user-1000.slice/session-1.scope
           Unit: session-1.scope
          Slice: user-1000.slice
        Session: 1
      Owner UID: 1000 (jb)
        Boot ID: 6416156c324e4cc1b4b51d51fd336068
     Machine ID: e464cf23e765494294ab3515a8e2efd0
       Hostname: myhost
        Storage:
 /var/lib/systemd/coredump/core.firefox\x2ereal.1000.6416156c324e4cc1b4b51d51fd336068.3718.1543001105000000.lz4
        Message: Process 3718 (firefox.real) of user 1000 dumped core.

                 Stack trace of thread 3718:
                 #0  0x00007fa50f71825f raise (libpthread.so.0)
                 #1  0x00007fa505b67b0f n/a (libxul.so)

 GNU gdb (GDB) 8.2
 ...
 Reading symbols from /home/jb/tor-browser_en-
 US/Browser/firefox.real...Reading symbols from /home/jb/tor-browser_en-
 US/Browser/.debug/firefox.real...done.
 done.
 [New LWP 3718]
 [New LWP 3728]
 [New LWP 3735]
 [New LWP 3935]
 [New LWP 3727]
 [New LWP 3732]
 [New LWP 3736]
 [New LWP 3767]
 [New LWP 3786]
 [New LWP 3944]
 [Thread debugging using libthread_db enabled]
 Using host libthread_db library "/usr/lib/libthread_db.so.1".
 Core was generated by `./firefox.real --class Tor Browser -profile
 TorBrowser/Data/Browser/profile.def'.
 Program terminated with signal SIGSEGV, Segmentation fault.
 #0  0x00007fa50f71825f in raise () from /usr/lib/libpthread.so.0
 [Current thread is 1 (Thread 0x7fa50f0d8b80 (LWP 3718))]
 (gdb) info reg
 rax            0x0                 0
 rbx            0xb                 11
 rcx            0x7fa50f71825f      140346905428575
 rdx            0x0                 0
 rsi            0x7fffb028a160      140736148840800
 rdi            0x2                 2
 rbp            0xb                 0xb
 rsp            0x7fffb028a160      0x7fffb028a160
 r8             0x0                 0
 r9             0x7fffb028a160      140736148840800
 r10            0x8                 8
 r11            0x246               582
 r12            0x7fffb028a4f0      140736148841712
 r13            0x7fffb028a3c0      140736148841408
 r14            0x7fffb028a4f0      140736148841712
 r15            0x7fa4f116d800      140346396170240
 rip            0x7fa50f71825f      0x7fa50f71825f <raise+271>
 eflags         0x246               [ PF ZF IF ]
 cs             0x33                51
 ss             0x2b                43
 ds             0x0                 0
 es             0x0                 0
 fs             0x0                 0
 gs             0x0                 0
 (gdb) bt
 #0  0x00007fa50f71825f in raise () at /usr/lib/libpthread.so.0
 #1  0x00007fa505b67b0f in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #2  0x0000000000000400 in  ()
 #3  0x0000000000000000 in  ()
 (gdb) info threads
   Id   Target Id                        Frame
 * 1    Thread 0x7fa50f0d8b80 (LWP 3718) 0x00007fa50f71825f in raise ()
 from /usr/lib/libpthread.so.0
   2    Thread 0x7fa502601700 (LWP 3728) 0x00007fa50f2f8c21 in poll () from
 /usr/lib/libc.so.6
   3    Thread 0x7fa4fddff700 (LWP 3735) 0x00007fa50f2fe4ed in syscall ()
 from /usr/lib/libc.so.6
   4    Thread 0x7fa4fd9fd700 (LWP 3935) 0x00007fa50f2f8c21 in poll () from
 /usr/lib/libc.so.6
   5    Thread 0x7fa5088b5700 (LWP 3727) 0x00007fa50f2f8c21 in poll () from
 /usr/lib/libc.so.6
   6    Thread 0x7fa4feeff700 (LWP 3732) 0x00007fa50f713e5b in
 pthread_cond_timedwait@@GLIBC_2.3.2 () from /usr/lib/libpthread.so.0
   7    Thread 0x7fa4fdbfe700 (LWP 3736) 0x00007fa50f2fe4ed in syscall ()
 from /usr/lib/libc.so.6
   8    Thread 0x7fa4f39fe700 (LWP 3767) 0x00007fa50f2f8c21 in poll () from
 /usr/lib/libc.so.6
   9    Thread 0x7fa4caefb700 (LWP 3786) 0x00007fa50f718057 in recvmsg ()
 from /usr/lib/libpthread.so.0
   10   Thread 0x7fa4c8c4b700 (LWP 3944) 0x00007fa50f2d06a8 in nanosleep ()
 from /usr/lib/libc.so.6
 (gdb) thread apply all bt

 Thread 10 (Thread 0x7fa4c8c4b700 (LWP 3944)):
 #0  0x00007fa50f2d06a8 in nanosleep () at /usr/lib/libc.so.6
 #1  0x00007fa50f2fbd08 in usleep () at /usr/lib/libc.so.6
 #2  0x00007fa5048edd6a in js::gc::detail::GetGCThingZone (addr=<optimized
 out>)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/HeapAPI.h:365
 #3  0x00007fa5048edd6a in JS::GetTenuredGCThingZone (thing=...) at
 /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/HeapAPI.h:469
 #4  0x00007fa5048edd6a in
 js::gc::IsIncrementalBarrierNeededOnTenuredGCThing (thing=...)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/HeapAPI.h:553
 #5  0x00007fa5048edd6a in js::gc::ExposeGCThingToActiveJS (thing=...)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/HeapAPI.h:571
 #6  0x00007fa5048edd6a in JS::ExposeObjectToActiveJS (obj=<optimized out>)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/HeapAPI.h:616
 #7  0x00007fa5048edd6a in
 js::BarrierMethods<JSObject*>::exposeToJS(JSObject*) (obj=<optimized out>)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/RootingAPI.h:652
 #8  0x00007fa5048edd6a in JS::Heap<JSObject*>::exposeToActiveJS() const
 (this=0xf98)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/RootingAPI.h:274
 #9  0x00007fa5048edd6a in JS::Heap<JSObject*>::get() const (this=0xf98)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/RootingAPI.h:277
 #10 0x00007fa5048edd6a in JS::Heap<JSObject*>::operator JSObject* const&()
 const (this=0xf98)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/RootingAPI.h:268
 #11 0x00007fa5048edd6a in JS::ObjectPtr::operator JSObject*() const
 (this=0xf98)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/js/RootingAPI.h:1381
 #12 0x00007fa5048edd6a in XPCWrappedNativeScope::GetGlobalJSObject() const
 (this=0xf68)
     at /var/tmp/build/firefox-
 d60cb3854f94/js/xpconnect/src/xpcprivate.h:894
 #13 0x00007fa5048edd6a in
 XPCWrappedNativeScope::AttachComponentsObject(JSContext*) (this=0xf68,
 aCx=0x3f)
     at /var/tmp/build/firefox-
 d60cb3854f94/js/xpconnect/src/XPCWrappedNativeScope.cpp:211
 #14 0x6237e26e84317fb1 in  ()
 #15 0x0000000000000000 in  ()

 Thread 9 (Thread 0x7fa4caefb700 (LWP 3786)):
 #0  0x00007fa50f718057 in recvmsg () at /usr/lib/libpthread.so.0
 #1  0x00007fa5071fb04a in nsTHashtable<nsBaseHashtableET<nsUint32HashKey,
 nsTArray<mozilla::Pair<char const*,
 nsTArray<mozilla::Pair<nsTString<char>, nsCOMPtr<nsIVariant> > > > > >
 >::nsTHashtable() (this=0xfffffffffffffe00)
     at /var/tmp/build/firefox-d60cb3854f94/obj-x86_64-pc-linux-
 gnu/dist/include/nsTHashtable.h:86
 #2  0x00007fa5071fb04a in nsBaseHashtable<nsUint32HashKey,
 nsTArray<mozilla::Pair<char const*,
 nsTArray<mozilla::Pair<nsTString<char>, nsCOMPtr<nsIVariant> > > > >,
 nsTArray<mozilla::Pair<char const*,
 nsTArray<mozilla::Pair<nsTString<char>, nsCOMPtr<nsIVariant> > > > >
 >::nsBaseHashtable()
     (this=0xfffffffffffffe00) at /var/tmp/build/firefox-d60cb3854f94/obj-
 x86_64-pc-linux-gnu/dist/include/nsBaseHashtable.h:64
 --Type <RET> for more, q to quit, c to continue without paging--c
 #3  0x00007fa5071fb04a in nsDataHashtable<nsUint32HashKey,
 nsTArray<mozilla::Pair<char const*,
 nsTArray<mozilla::Pair<nsTString<char>, nsCOMPtr<nsIVariant> > > > >
 >::nsDataHashtable() (this=0xfffffffffffffe00) at /var/tmp/build/firefox-
 d60cb3854f94/obj-x86_64-pc-linux-gnu/dist/include/nsDataHashtable.h:33
 #4  0x00007fa5071fb04a in TelemetryScalar::CreateKeyedSnapshots(unsigned
 int, bool, JSContext*, unsigned char, JS::MutableHandle<JS::Value>)
 (aDataset=2, aClearScalars=228, aCx=0x7fa4caef5e70,
 optional_argc=<optimized out>, aResult=...) at /var/tmp/build/firefox-
 d60cb3854f94/toolkit/components/telemetry/TelemetryScalar.cpp:2286
 #5  0x0000000000000000 in  ()

 Thread 8 (Thread 0x7fa4f39fe700 (LWP 3767)):
 #0  0x00007fa50f2f8c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007fa4f75e2673 in  () at /usr/lib/libpulse.so.0
 #2  0x00007fa4f75d3990 in pa_mainloop_poll () at /usr/lib/libpulse.so.0
 #3  0x00007fa4f75d3fe0 in pa_mainloop_iterate () at /usr/lib/libpulse.so.0
 #4  0x00007fa4f75d4091 in pa_mainloop_run () at /usr/lib/libpulse.so.0
 #5  0x00007fa4f75e25ae in  () at /usr/lib/libpulse.so.0
 #6  0x00007fa4f73819fc in  () at
 /usr/lib/pulseaudio/libpulsecommon-12.2.so
 #7  0x00007fa50f70da9d in start_thread () at /usr/lib/libpthread.so.0
 #8  0x00007fa50f303b23 in clone () at /usr/lib/libc.so.6

 Thread 7 (Thread 0x7fa4fdbfe700 (LWP 3736)):
 #0  0x00007fa50f2fe4ed in syscall () at /usr/lib/libc.so.6
 #1  0x00007fa5058ae73a in sh::UniformHLSL::assignUniformRegister(sh::TType
 const&, sh::ImmutableString const&, unsigned int*) (this=0x7fa4fdbfdb10,
 type=..., name=..., outRegisterCount=0x7) at /var/tmp/build/firefox-
 d60cb3854f94/gfx/angle/checkout/src/compiler/translator/UniformHLSL.cpp:157
 #2  0x0000000000000000 in  ()

 Thread 6 (Thread 0x7fa4feeff700 (LWP 3732)):
 #0  0x00007fa50f713e5b in pthread_cond_timedwait@@GLIBC_2.3.2 () at
 /usr/lib/libpthread.so.0
 #1  0x00007fa50f09bb53 in PR_GetIPNodeByName (name=0x7fa501c54800
 "\270\276\300\n\245\177", af=<optimized out>, flags=1000, buf=<optimized
 out>, bufsize=<optimized out>, hp=0xffffffff) at /var/tmp/build/firefox-
 d60cb3854f94/nsprpub/pr/src/misc/prnetdb.c:860
 #2  0x0000000000000000 in  ()

 Thread 5 (Thread 0x7fa5088b5700 (LWP 3727)):
 #0  0x00007fa50f2f8c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007fa50d7e7ee0 in  () at /usr/lib/libglib-2.0.so.0
 #2  0x00007fa50d7e7fce in g_main_context_iteration () at
 /usr/lib/libglib-2.0.so.0
 #3  0x00007fa50d7e8022 in  () at /usr/lib/libglib-2.0.so.0
 #4  0x00007fa50d7b13eb in  () at /usr/lib/libglib-2.0.so.0
 #5  0x00007fa50f70da9d in start_thread () at /usr/lib/libpthread.so.0
 #6  0x00007fa50f303b23 in clone () at /usr/lib/libc.so.6

 Thread 4 (Thread 0x7fa4fd9fd700 (LWP 3935)):
 #0  0x00007fa50f2f8c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007fa4f75e2673 in  () at /usr/lib/libpulse.so.0
 #2  0x00007fa4f75d3990 in pa_mainloop_poll () at /usr/lib/libpulse.so.0
 #3  0x00007fa4f75d3fe0 in pa_mainloop_iterate () at /usr/lib/libpulse.so.0
 #4  0x00007fa4f75d4091 in pa_mainloop_run () at /usr/lib/libpulse.so.0
 #5  0x00007fa4f75e25ae in  () at /usr/lib/libpulse.so.0
 #6  0x00007fa4f73819fc in  () at
 /usr/lib/pulseaudio/libpulsecommon-12.2.so
 #7  0x00007fa50f70da9d in start_thread () at /usr/lib/libpthread.so.0
 #8  0x00007fa50f303b23 in clone () at /usr/lib/libc.so.6

 Thread 3 (Thread 0x7fa4fddff700 (LWP 3735)):
 #0  0x00007fa50f2fe4ed in syscall () at /usr/lib/libc.so.6
 #1  0x00007fa5058ae73a in sh::UniformHLSL::assignUniformRegister(sh::TType
 const&, sh::ImmutableString const&, unsigned int*) (this=0x7fa4fddfeb10,
 type=..., name=..., outRegisterCount=0x7fa50ef00000) at /var/tmp/build
 /firefox-
 d60cb3854f94/gfx/angle/checkout/src/compiler/translator/UniformHLSL.cpp:157
 #2  0x00007fa50615e40a in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #3  0x0000000000000000 in  ()

 Thread 2 (Thread 0x7fa502601700 (LWP 3728)):
 #0  0x00007fa50f2f8c21 in poll () at /usr/lib/libc.so.6
 #1  0x00007fa50d7e7ee0 in  () at /usr/lib/libglib-2.0.so.0
 #2  0x00007fa50d7e8f62 in g_main_loop_run () at /usr/lib/libglib-2.0.so.0
 #3  0x00007fa50da7ac28 in  () at /usr/lib/libgio-2.0.so.0
 #4  0x00007fa50d7b13eb in  () at /usr/lib/libglib-2.0.so.0
 #5  0x00007fa50f70da9d in start_thread () at /usr/lib/libpthread.so.0
 #6  0x00007fa50f303b23 in clone () at /usr/lib/libc.so.6

 Thread 1 (Thread 0x7fa50f0d8b80 (LWP 3718)):
 #0  0x00007fa50f71825f in raise () at /usr/lib/libpthread.so.0
 #1  0x00007fa505b67b0f in  () at /home/jb/tor-browser_en-
 US/Browser/libxul.so
 #2  0x0000000000000400 in  ()
 #3  0x0000000000000000 in  ()
 (gdb)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28606>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Follow-Ups:
- Re: [tor-bugs] #28606 [Applications/Tor Browser]: TB 8.5a4 Sig 11 core dump
  - From: Tor Bug Tracker & Wiki

Prev by Author: Re: [tor-bugs] #28545 [Core Tor/sbws]: Use an 11 second download in sbws
Next by Author: Re: [tor-bugs] #27443 [Applications/Tor Browser]: Update Firefox RBM config and build for Android
Previous by thread: [tor-bugs] #28605 [Applications/Tor Browser]: OMG! Guard node only!
Next by thread: Re: [tor-bugs] #28606 [Applications/Tor Browser]: TB 8.5a4 Sig 11 core dump
Index(es):
- Author
- Thread