[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #13893 [Applications/Tor Browser]: Torbrowser crashes on start when using MS EMET 5.x
#13893: Torbrowser crashes on start when using MS EMET 5.x
-------------------------------------------------+-------------------------
Reporter: Diapolo | Owner: gk
Type: defect | Status:
| reopened
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Major | Resolution:
Keywords: tbb-security, tbb-crash, tbb- | Actual Points:
usability-stoppoint-app, fuck-mingw-gcc, |
GeorgKoppen201609, TorBrowserTeam201610, |
ff52-esr |
Parent ID: #12820 | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by bugzilla):
Replying to [comment:86 gk]:
> Replying to [comment:85 bugzilla]:
> > Replying to [comment:84 gk]:
> > > I think Tor Browser started for all of them (see comment:73,
comment:75 and I tested it on my machines as well) and it worked with GCC
6 while it did not without it.
> > Have you reverted https://hg.mozilla.org/releases/mozilla-
aurora/rev/7d7176ca2470 to test `IOInterposer`?
> No.
> > Have you seen the requirements for invoking `AvailableMemoryTracker`?
> Yes. Not sure what you want to point out.
That you didn't make the conditions to properly test for VirtualProtectEx
calls.
>
> No. But what I did was compiling our latest 45.4.0esr code once with GCC
< 6 and once with GCC 6 and the latter allowed me to run Tor Browser with
EMET while the former not. *All* other things were equal.
If EMET can't detect vulnerabilities at startup, it doesn't mean they are
gone.
> > TBB freezes with EAF, nothing to discuss.
>
> You mean the nightly build I pointed you to? That worked pretty fine for
me with all the EMET features enabled. Others reported that as well (and I
assume they had all features enabled, too).
>
It's about security, not bells and whistles with shiny checkboxes to
enable them all. You can't activate some features without entering custom
values.
Any app freezes with EAF, even M$ sees it (see
https://support.microsoft.com/en-us/kb/3175024).
Here is your nightly (plugin-container.exe):
{{{
CodeAddress : 0x5B387DC7
CodeStackPtr : 0x51ECA0
CalledAddress : 0x75BF0479
API name : kernel32.VirtualProtectEx
StackPtr : 0x0051EC20
FramePtr : 0x5CCE3324
}}}
(You haven't answered why you use debug `-g` on Windows stable.)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13893#comment:87>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs