594702 - startup crash [@ SHA256_Compress ]

Status: RESOLVED WORKSFORME

(NSS :: Libraries, defect, P5)

Description

[Ludovic Hirlimann [:Usul]]

This is a crash on 1.9.1 so I don't know which version of NSS is there. It's a startup crash.

0  	freebl3.dll  	SHA256_Compress  	 security/nss/lib/freebl/sha512.c:263
1 	freebl3.dll 	SHA256_Update 	security/nss/lib/freebl/sha512.c:417
2 	freebl3.dll 	prng_Hash_df 	security/nss/lib/freebl/drbg.c:175
3 	freebl3.dll 	prng_instantiate 	security/nss/lib/freebl/drbg.c:197
4 	freebl3.dll 	rng_init 	security/nss/lib/freebl/drbg.c:406
5 	nspr4.dll 	PR_CallOnce 	nsprpub/pr/src/misc/prinit.c:805
6 	freebl3.dll 	RNG_RNGInit 	security/nss/lib/freebl/drbg.c:469
7 	softokn3.dll 	nsc_CommonInitialize 	security/nss/lib/softoken/pkcs11.c:2582
8 	softokn3.dll 	NSC_Initialize 	security/nss/lib/softoken/pkcs11.c:2710
9 	nss3.dll 	secmod_ModuleInit 	security/nss/lib/pk11wrap/pk11load.c:252
10 	nss3.dll 	secmod_LoadPKCS11Module 	security/nss/lib/pk11wrap/pk11load.c:492
11 	nss3.dll 	SECMOD_LoadModule 	security/nss/lib/pk11wrap/pk11pars.c:1108
12 	nss3.dll 	SECMOD_LoadModule 	security/nss/lib/pk11wrap/pk11pars.c:1143
13 	nss3.dll 	nss_InitModules 	security/nss/lib/nss/nssinit.c:461
14 	nss3.dll 	NSS_InitReadWrite 	security/nss/lib/nss/nssinit.c:724
15 	thunderbird.exe 	nsNSSComponent::InitializeNSS 	security/manager/ssl/src/nsNSSComponent.cpp:1614
16 	thunderbird.exe 	nsNSSComponent::Init 	security/manager/ssl/src/nsNSSComponent.cpp:1826
17 	thunderbird.exe 	nsNSSComponentConstructor 	security/manager/ssl/src/nsNSSModule.cpp:184
18 	xpcom_core.dll 	nsGenericFactory::CreateInstance 	objdir-tb/mozilla/xpcom/build/nsGenericFactory.cpp:80
19 	xpcom_core.dll 	nsComponentManagerImpl::CreateInstanceByContractID 	xpcom/components/nsComponentManager.cpp:1687
20 	xpcom_core.dll 	nsComponentManagerImpl::GetServiceByContractID 	xpcom/components/nsComponentManager.cpp:2253
21 	xpcom_core.dll 	CallGetService 	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:94
22 	xpcom_core.dll 	nsGetServiceByContractID::operator 	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:278
23 	xpcom_core.dll 	nsCOMPtr_base::assign_from_gs_contractid 	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:132
24 	thunderbird.exe 	nsCOMPtr<nsINSSComponent>::nsCOMPtr<nsINSSComponent> 	objdir-tb/mozilla/dist/include/xpcom/nsCOMPtr.h:604
25 	thunderbird.exe 	EnsureNSSInitialized 	security/manager/ssl/src/nsNSSComponent.cpp:321
26 	thunderbird.exe 	nsCryptoHashConstructor 	security/manager/ssl/src/nsNSSModule.cpp:214
27 	xpcom_core.dll 	nsGenericFactory::CreateInstance 	objdir-tb/mozilla/xpcom/build/nsGenericFactory.cpp:80
28 	xpcom_core.dll 	nsComponentManagerImpl::CreateInstanceByContractID 	xpcom/components/nsComponentManager.cpp:1687
29 	xpcom_core.dll 	CallCreateInstance 	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:170
30 	xpcom_core.dll 	nsCreateInstanceByContractID::operator 	objdir-tb/mozilla/xpcom/build/nsComponentManagerUtils.cpp:210
31 	xpcom_core.dll 	nsCOMPtr_base::assign_from_helper 	objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:150
32 	thunderbird.exe 	nsCOMPtr<nsICryptoHash>::nsCOMPtr<nsICryptoHash> 	objdir-tb/mozilla/dist/include/xpcom/nsCOMPtr.h:621
33 	thunderbird.exe 	nsUrlClassifierDBService::Init 	toolkit/components/url-classifier/src/nsUrlClassifierDBService.cpp:3885
34 	thunderbird.exe 	nsUrlClassifierDBService::GetInstance 	toolkit/components/url-classifier/src/nsUrlClassifierDBService.cpp:3844
35 	thunderbird.exe 	nsUrlClassifierDBServiceConstructor 	toolkit/components/build/nsToolkitCompsModule.cpp:105
36 	xpcom_core.dll 	nsGenericFactory::CreateInstance 	objdir-tb/mozilla/xpcom/build/nsGenericFactory.cpp:80
37 	xpcom_core.dll 	nsComponentManagerImpl::CreateInstance 	xpcom/components/nsComponentManager.cpp:1601
38 	xpcom_core.dll 	nsComponentManagerImpl::GetService 	xpcom/components/nsComponentManager.cpp:1903
39 	thunderbird.exe 	nsJSCID::GetService 	js/src/xpconnect/src/xpcjsid.cpp:891
40 	xpcom_core.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
41 	thunderbird.exe 	XPCWrappedNative::CallMethod 	js/src/xpconnect/src/xpcwrappednative.cpp:2456
42 	thunderbird.exe 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1590
43 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1386
44 	js3250.dll 	js_Interpret 	js/src/jsinterp.cpp:5181
45 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1394
46 	thunderbird.exe 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1745
47 	thunderbird.exe 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:569
48 	xpcom_core.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
49 	xpcom_core.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
50 	xpcom_core.dll 	nsComponentManagerImpl::CreateInstance 	xpcom/components/nsComponentManager.cpp:1601

Comment 1

[Wayne Mery (:wsmwk)]

what's the deal with this crash?

crashes are mostly startup, like bp-e505280f-a9b8-402e-b8c6-777f62111221 from http://getsatisfaction.com/mozilla_messaging/topics/cannot_start_thunderbird_even_in_safe_mode

and, SHA256_Update signature is another startup crash

( bp-eefc5e09-6eb8-4376-b205-e731c2100908 for comment 0)

Comment 2

[Wayne Mery (:wsmwk)]

Plenty of Firefox crashes. Also mostly startup

https://crash-stats.mozilla.com/report/list?signature=SHA256_Compress&product=Firefox&query_type=is_exactly&range_unit=weeks&process_type=any&hang_type=any&date=2013-12-05+20%3A00%3A00&range_value=4#reports

bp-d6d6be8d-547e-4ca0-99a0-8dd4c2131126
0	freebl3.dll	SHA256_Compress	security/nss/lib/freebl/sha512.c
1	freebl3.dll	SHA256_Update	security/nss/lib/freebl/sha512.c
2	freebl3.dll	prng_Hash_df	security/nss/lib/freebl/drbg.c
3	freebl3.dll	prng_instantiate	security/nss/lib/freebl/drbg.c
4	freebl3.dll	rng_init	security/nss/lib/freebl/drbg.c
5	nspr4.dll	PR_CallOnce	nsprpub/pr/src/misc/prinit.c
6	freebl3.dll	RNG_RNGInit	security/nss/lib/freebl/drbg.c
7	softokn3.dll	nsc_CommonInitialize	security/nss/lib/softoken/pkcs11.c

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'SHA256_Compress':
 - nightly (version 50): 0 crash from 2016-06-06.
 - aurora  (version 49): 1 crash from 2016-06-07.
 - beta    (version 48): 98 crashes from 2016-06-06.
 - release (version 47): 229 crashes from 2016-05-31.
 - esr     (version 45): 4 crashes from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          0          0          0          0
 - aurora           0          0          0          0          0          1          0
 - beta            15         18         15         12         31          5          1
 - release         33         24         44         35         38         34          6
 - esr              0          0          0          0          4          0          0

Affected platforms: Windows, Mac OS X, Linux

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'SHA256_Compress':
 - nightly (version 51): 1 crash from 2016-08-01.
 - aurora  (version 50): 0 crashes from 2016-08-01.
 - beta    (version 49): 28 crashes from 2016-08-02.
 - release (version 48): 37 crashes from 2016-07-25.
 - esr     (version 45): 13 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       1
 - aurora        0       0       0
 - beta          2      10      13
 - release      11       9       4
 - esr           0       0       1

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser     Content   Plugin
 - nightly
 - aurora
 - beta    #3700
 - release #1140
 - esr

Comment 5

[Wayne Mery (:wsmwk)]

Is this even a crypto crash?

Only one version 60 crash in 6 months bp-8a9245dc-e1c7-4308-b4eb-631960181226

Comment 6

[Kai Engert [:KaiE:]]

Various reasons for crashing, most seem illegal instructions, like the instruction pointer pointing a location that doesn't contain valid assembler code, or assembler code not permissible outside the kernel level. Discussions on stackoverflow suggest that a corrupted stack or invalid function pointers is likely. The crash on TB 60 branch in NSS sha512.c happens while moving data around within a block of memory, to calculate a hash. This should trigger an invalid code exception, except when the memory it's working on is already bad.

Comment 7

[Kai Engert [:KaiE:]]

s/should trigger/shouldn't trigger/

Comment 8

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Comment 9

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.