1465215 - Adding a PKCS11 Module to 60.0.1 ESR causes it to crash (macOS 10.13)

Status: RESOLVED DUPLICATE of bug 1461731

(NSS :: Libraries, defect)

Description

[golbiga]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.56 Safari/537.36

Steps to reproduce:

1. Go to about:preferences#privacy
2. Click on Security Devices
3. Click Load and Add ActivClient Module 
   a. /Library/Frameworks/ac.ac4mac.pkcs11.framework/Versions/A/Libraries/acpkcs220.dylib
4. Restart client.

I've also tried adding the module with modutil by installing nss via homebrew. End up with the same results. I've tested both ActivClient 4.0.1.88, 4.0.1.92 and OpenSC 0.18.0.


Actual results:

Module loads and I'm able to use my smartcard, however Firefox will crash anywhere from a few seconds to a few minutes. Reproduced this on multiple systems.


Expected results:

It should not crash.

Comment 1

[Stefan [:StefanG_QA]]

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Firefox 60.0 (20180516032328)

I've tried to test this report but I did not manage to find the mentioned module in order to reproduce the crash. 

Could you provide a crash ID report from about:crashes? 

Based on other similar reports I think the correct component would be NSS:: Libraries. Please change if this is not the right component.

Comment 2

[golbiga]

To test this you can use OpenSC, https://github.com/OpenSC/OpenSC/releases. They also have a page on how to add their module, https://github.com/OpenSC/OpenSC/wiki/Installing-OpenSC-PKCS%2311-Module-in-Firefox,-Step-by-Step. Once I've added the module it will crash after a few minutes. I've not been able to get a crash ID bc the app hangs and I need to force quit it. Here is how i've been able to reproduce it.

1. Add the tokend module via Security Devices
2. Restart Browser
3. Goto a website like max.gov (This will work with PIV & won't crash).
4. Goto a site like nytimes.com and the browser will hang almost instantly.

Comment 3

[Franziskus Kiefer [:franziskus]]

Thanks for reporting. Could this be related to bug 1461731? Can you try nightly (the issue from 1461731 is fixed there)?

Comment 4

[golbiga]

It looks like it is related! I just installed nightly and added the pkcs11 module and it no longer crashes. Out of curiosity how soon would a fix like this in nightly make it's way into the ESR build?

Thanks!
Allen

Comment 5

[Franziskus Kiefer [:franziskus]]

See bug 1466028 for the ESR60 release.