1709052 - Crashes caused by OpenSC version 0.20.0.0

Status: NEW

(External Software Affecting Firefox :: Other, defect, P3)

Description

[Gabriele Svelto [:gsvelto] (PTO)]

Crash report: https://crash-stats.mozilla.org/report/index/abbe3456-9289-417f-95a9-afb050210502

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x228279 
1 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0xf94c1 
2 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x270667 
3 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x24559f 
4 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x5cc9e 
5 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x304c3f 
6 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x5c160 
7 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x2450ff 
8 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x49da4 
9 onepin-opensc-pkcs11.dll onepin-opensc-pkcs11.dll@0x3554ff 

This has been a major problem in the past but was resolved upstream. Unfortunately it seems that there's still some users who haven't been updated. Since OpenSC is often embedded in government-supplied applications that might be one reason why many users are still on an old version: until the bundler updates its dependencies the users are stuck.

Filing this to track the volume (and maybe block this old version?).

Comment 1

[Gabriele Svelto [:gsvelto] (PTO)]

Oh well, the volume seems to be going down over time so users are upgrading fortunately.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 15 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.