1280292 - Crash in nsSSLIOLayerHelpers::adjustForTLSIntolerance

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[larry.shapiro]

This bug was filed from the Socorro interface and is 
report bp-99d49c00-a181-4f21-9146-a74242160615.
=============================================================

Comment 1

[larry.shapiro]

Crashes after upgrading from version 3x (31-39.0.0.3) to any version of 4.x (40-47) Occurs opening new tab, cnn.com, newspaper sites, etc. Revert back to version 39, everything works fine. Occurs on all different hardware platforms. Windows 7 x32.

Comment 3

[Loic]

Does it crash with a fresh profile?
https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles

Comment 4

[larry.shapiro]

Tried deleting the profile as indicated in the link and created a new default profile. The app still crashes.

Comment 5

[larry.shapiro]

Only way to stop the crashing is to delete the Local and roaming Mozilla folders under the user profile.

Comment 6

[Loic]

Are you sure these crashes are not caused by your antivirus or a 3rd-party application about security?

Comment 7

[larry.shapiro]

Unfortunately, they are not from a 3rd party app. This occurs when I opened in safe mode. have previously disabled all add ins. The crashes do not occur with previous version (39.0.3 or prior). Occurs as soon as I upgrade to 40 or above.

Comment 8

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

What about PKCS#11 modules? Can you list the information from Preferences -> Advanced -> Certificates -> Security Devices?

Comment 9

[larry.shapiro]

Attachment: Version 39.0.3 security device PKCS 11 entries

When I upgrade from version 39.0.3 to version 40.0.3 the PKCS 11 security devices remain the same. The crashes occur after the upgrade to version 40.0.3 and above.

Comment 10

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Are the Builtin Roots Module and Builtin Object Token information the same as well? Also, what version of NSS do you have on your system?

Comment 11

[larry.shapiro]

The Builtin Roots Module and Builtin Object Token information are the same. NSS version for v39.0.3 is 3.19. For 47.0 is 3.23

Comment 12

[larry.shapiro]

Resolved. Rights conflict with Flash Player and desktop standard user rights controlled by Avecto privilege guard

Comment 13

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Good to hear you've resolved your issue. Could you elaborate more on the situation? Was Flash Player attempting to do something it shouldn't have? How was Flash Player/Avecto causing a crash in this part of Firefox? (this code has nothing to do with plugins - just responding to indications that the server being connected to may be TLS-intolerant)