1102040 - crash in nss3.dll@0x1d69e0

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Mats Palmgren (inactive)]

This bug was filed from the Socorro interface and is 
report bp-b6c39948-d389-4920-a0ea-3def52141105.
=============================================================

[Tracking Requested - why for this release]:
This is a new startup crash in Nightly that appears to have started
around 2014-11-05.

More crash incidents at:
https://crash-stats.mozilla.com/report/list?signature=nss3.dll%400x1d69e0&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&range_value=4#tab-reports

Comment 1

[Mats Palmgren (inactive)]

Oh, it seems to be 64-bit only.  I suspect this signature is also related (it started
at the same time) and it has a better stack:  bp-a15c68f2-215c-4118-8d69-7ce222141105

More at:
https://crash-stats.mozilla.com/report/list?product=Firefox&range_unit=days&version=Firefox%3A36.0a1&signature=nss3.dll%400x1d69e0+|+wajam_goblin_64.dll%400x387d0&range_value=28#tab-reports

Comment 2

[Mats Palmgren (inactive)]

And another signature that looks like the same problem:
https://crash-stats.mozilla.com/report/list?product=Firefox&range_unit=days&version=Firefox%3A36.0a1&signature=nss3.dll%400x1da9e0&range_value=28#tab-reports

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Startup crash, tracking.

Comment 4

[Mats Palmgren (inactive)]

Kai or Wan-Teh, do you have an idea what the problem might be here?

Comment 5

[Kai Engert (:KaiE:)]

I believe there weren't any NSS upgrades on mozilla-central around 2014-11-05 (I was on vacation and didn't see any activity).

In all threads, I see wajam_goblin_64.dll that calls NSS.

Could that be the issue?

Searching the web, I see that Chromium has apparently blacklisted that library, and other reports, who claim the library is trying to inject something into the application and is a potential threat.

Comment 6

[Sylvestre Ledru [:Sylvestre]]

David, do you think we should blacklist this lib too? Thanks

Comment 7

[(Away)]

I'm not a big fan of these Wajam libraries, but lmandel has a contact over there. Let's give them a chance first.

Comment 8

[Lawrence Mandel [:lmandel] (use needinfo)]

I sent a request to Wajam to review this bug today. I'll report back if and when I hear from them.

Comment 9

[Mats Palmgren (inactive)]

http://www.howtogeek.com/198622/heres-what-happens-when-you-install-the-top-10-download.com-apps/
"We’re not sure what WajamPage.exe is, but after a quick Google, it becomes clear that it’s yet another browser hijacker and we’re lucky it didn’t install."

Comment 10

[Lawrence Mandel [:lmandel] (use needinfo)]

Wajam confirms that this bug is fixed in the latest version.

(In reply to Mats Palmgren (:mats) from comment #9)
> http://www.howtogeek.com/198622/heres-what-happens-when-you-install-the-top-
> 10-download.com-apps/
> "We’re not sure what WajamPage.exe is, but after a quick Google, it becomes
> clear that it’s yet another browser hijacker and we’re lucky it didn’t
> install."

To be clear, my working with Wajam is not an endorsement of their product. We should take appropriate actions to protect Firefox users as always. However, some number of users will have Wajam installed on their systems. For these users, I think it is preferable that Firefox not crash and so I am happy to pass on crash and related information to Wajam to help them improve the stability of both of our products.

Comment 11

[Sylvestre Ledru [:Sylvestre]]

Lawrence, any news from them? Thanks

Comment 12

[Lawrence Mandel [:lmandel] (use needinfo)]

No but I'm not sure that I should expect any. I think the original timeline they gave for rolling out the fix puts it somewhere at the beginning of Feb. We should try to confirm that the crash signature has disappeared in order to close this bug.

Comment 13

[Sylvestre Ledru [:Sylvestre]]

There is not much we can do here. Not tracking anymore.

Comment 14

[(Away)]

As far as I can tell there isn't any cause for concern in current crash-stats. wajam_goblin signatures pretty much disappeared by early December.