649250 - Firefox crashes after inserting pkcs11 security token

Status: RESOLVED INVALID

(NSS :: Libraries, defect)

Description

[Vitor Choi Feitosa]

User-Agent:       Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0) Gecko/20100101 Firefox/4.0
Build Identifier: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0) Gecko/20100101 Firefox/4.0

Right after inserting a security token, FF4 crashes and won't restart. Unplugging the token enables FF4 to start again.

Token works perfectly on FF 3.6.16.

OS: MacOS 10.6.7
Token: eToken Pro 72k
Token Software: Safenet Authentication Client 8.00.0-1
Library: /usr/local/lib/libeTPkcs11.dylib


Reproducible: Always

Steps to Reproduce:
1. Start FF
2. Configure the pkcs11 library (preferences, advanced, security devices, load, type pkcs11 lib path)
3. Plug the token in.
Actual Results:  
Crash, "Report Crash" window opens. If the token is still plugged in, FF won't restart.

Expected Results:  
token available for authentication on websites.

Comment 1

[Vitor Choi Feitosa]

AdapterRendererIDs: 0x22600,0x22600,0x20400
Add-ons: {02450954-cdd9-410f-b1da-db804e18c671}:0.96.3,{340c2bbc-ce74-4362-90b5-7c26312808ef}:1.7,{DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2,[e-mail]:1.1,{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}:0.9.5,[e-mail]:1.7.0,[e-mail]:3.1.5,{972ce4c6-7e08-4474-a285-3208198ce6fd}:4.0
BuildID: 20110318052756
CrashTime: 1302592951
EMCheckCompatibility: true
Email: [e-mail]
FramePoisonBase: 7ffffffff0dea000
FramePoisonSize: 4096
InstallTime: 1301456716
Notes: Renderers: 0x22600,0x22600,0x20400GL Context? GL Context+
GL Layers? GL Layers+

ProductName: Firefox
ReleaseChannel: release
SecondsSinceLastCrash: 787112
StartupTime: 1302569142
Theme: classic/1.0
Throttleable: 1
URL: https://bugzilla.mozilla.org/post_bug.cgi
Vendor: Mozilla
Version: 4.0

Este relatório também contém informações técnicas sobre o estado do aplicativo quando travou.

Comment 2

[timeless]

https://developer.mozilla.org/en/How_to_get_a_stacktrace_for_a_bug_report

Comment 3

[Kaspar]

(In reply to comment #0)
> Right after inserting a security token, FF4 crashes and won't restart.
> Unplugging the token enables FF4 to start again.
> 
> Token works perfectly on FF 3.6.16.
> 
> OS: MacOS 10.6.7
> Token: eToken Pro 72k
> Token Software: Safenet Authentication Client 8.00.0-1
> Library: /usr/local/lib/libeTPkcs11.dylib

I can confirm (and reproduce) this issue - it's one with the SafeNet Authentication Client, however.

Bug 571367 changed the default OS X build to include 64-bit support, so when running on 10.6 (Snow Leopard), Firefox 4 runs under the x86_64 arch.

The problem with libeTPkcs11.dylib is that the 64-bit version was apparently compiled with CK_ULONG being 4 bytes only - but it should be 8, as CK_ULONG is defined as "unsigned long int" in the PKCS#11 standard (for OS X, see also http://developer.apple.com/library/mac/#documentation/Darwin/Conceptual/64bitPorting/transition/transition.html).

(In reply to comment #2)
> https://developer.mozilla.org/en/How_to_get_a_stacktrace_for_a_bug_report

The first time NSS crashes is usually at lib/pk11wrap/pk11slot.c line 1092, in PK11_ReadMechanismList, because "count" can hold absurdly large values (the C_GetMechanismList call in line 1079 will only fill in 4 bytes when libeTPkcs11.dylib runs in 64-bit mode). While this specific issue with pk11slot.c could in theory be fixed by explicitly initializing "count" with 0 in line 1055, it will simply shift the problems to other calls.

The only real fix is that SafeNet provides a new, properly compiled libeTPkcs11.dylib module.

As an interim workaround, Firefox 4 can be forced to run in 32-bit mode with "arch -i386 /Applications/Firefox.app/Contents/MacOS/firefox-bin".

Comment 4

[Vitor Choi Feitosa]

Issue reported to safenet support and assigned incident number # 1052137.

---

From: Safenet Support <[e-mail]>
To: Vitor Choi Feitosa <[e-mail]>
Date: Mon, 18 Apr 2011 19:35:37 +0530
Subject: RE: Bug in MacOS X Safenet Authentication Client 8.00.0-1 | Support
 Incident ID: 1052137 

Dear Customer,

Thank you for contacting SafeNet technical Services
We have acknowledged the receipt of your email and the incident id logged i=
s # 1052137.

We will get back to you at the earliest.

Best Regards,

Kshitij Jain
Technical Services