696336 - Crash with NoScript in FIPS mode

Status: RESOLVED WONTFIX

(Firefox :: Security, defect)

Description

[Laurentiu Pancescu]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Build ID: 20110928134238

Steps to reproduce:

I created a new Firefox profile (latest stable, 7.0.1, on Mac OS X 10.6.8 "Snow Leopard"), without touching anything in the Preferences. I then installed NoScript, restarted, and enabled FIPS mode according to Mozilla instructions. I then started to browse normally.


Actual results:

Firefox crashes very often, sometimes within seconds from starting. I started seeing the crashes since Firefox 4.0.1 (probably when I started using FIPS). I don't see any crashes without NoScript. Here are two crashes reports from yesterday:

https://crash-stats.mozilla.com/report/index/bp-974f4e1f-e3b0-4591-90ed-a60a62111020
https://crash-stats.mozilla.com/report/index/bp-87216354-5312-4342-be38-09f312111020



Expected results:

The browser shouldn't have crashed. I was able to browse in FIPS mode for more than a week without NoScript, and I also don't get crashes with NoScript but not in FIPS mode.

Comment 1

[Boris Zbarsky [:bzbarsky]]

Those aren't terribly informative stacks...

Giorgio, do you have the bandwidth to look into this?

Comment 2

[Giorgio Maone [:ma1]]

(In reply to Boris Zbarsky (:bz) from comment #1)
> Those aren't terribly informative stacks...
> 
> Giorgio, do you have the bandwidth to look into this?

I've tried to reproduce on Windows and Linux, but no dice so far and I don't have a Mac (or Hackintosh) at hand ATM. Looking around...

Comment 3

[Boris Zbarsky [:bzbarsky]]

Hmm.  I tried reproducing, but following the steps for enabling FIPS doesn't seem to work: I click the "Enable FIPS" button and nothing happens (this is on trunk, though).

Comment 4

[Giorgio Maone [:ma1]]

(In reply to Boris Zbarsky (:bz) from comment #3)
> Hmm.  I tried reproducing, but following the steps for enabling FIPS doesn't
> seem to work: I click the "Enable FIPS" button and nothing happens (this is
> on trunk, though).

Bug 460534 ?

Comment 5

[Laurentiu Pancescu]

(In reply to Giorgio Maone from comment #2)
> I've tried to reproduce on Windows and Linux, but no dice so far and I don't
> have a Mac (or Hackintosh) at hand ATM. Looking around...
Even on Mac, it crashes often (more often than not) but not always. When it starts crashing, it keeps crashing until I reboot the computer (log out never helps). Sometimes I need to reboot multiple times or clean the entire history (Firefox is set to reload the pages, no big deal, but after a few hours or days, it starts crashing again). It can also crash after a while in the background, say 10 minutes, while I'm e.g. typing in Aquamacs or reading a PDF.

Can I help in any way?  I don't know anything about the architecture or internals of Firefox, but I can usually find my way around large code bases, and I have a Mac mini, XCode 3 and Mercurial and know how to use them. Would it help to run Firefox under gdb or XCode's integrated debugger, if I can reproduce the crash?

I got quite a lot of crashes, but the stack traces look the same to me (for some reason, quite many didn't make it on the crash-stats). Why does the crash tool think that bug 424770, apparently affecting Eudora, is related to this?  Here's the crash list:

bp-87216354-5312-4342-be38-09f312111020
bp-974f4e1f-e3b0-4591-90ed-a60a62111020
bp-2e3495d1-ff95-46b6-bec0-f7b752111019
bp-b2c197d2-f6de-4853-867f-d5a952111019
bp-0e764102-ea4c-4021-be85-6149a2111019
bp-a32925c8-f831-43cf-b27e-0ec812111018
bp-8cb4f81b-55f1-4501-9214-b3d952111018
bp-598a7e4e-6ec7-4bc9-a6b5-71aa32111018
bp-cc04a5f5-fcc7-4d26-861d-ca33b2111018
bp-afbd9286-0673-4ee9-81f2-912e02111013
bp-09b46450-59b0-49a0-9e4b-971062111013
bp-5aba9be5-247b-461f-b5d2-1e8952111013
bp-4209eb33-4d61-471a-a0fc-cff022111013
bp-043b3e3b-c798-42d1-905f-8244b2110909
bp-f6446d84-0105-42a5-a441-83ac12110909
bp-5721c981-3398-4952-b5ae-375372110824
bp-b32e9711-786a-46f4-8fb7-16c482110801
bp-78d5d177-b7ae-4b2b-9451-c7a062110801
bp-b25a3a09-b78c-4e52-8d85-f61922110801
bp-5f95bdb4-e367-4bdb-8068-1ef092110801
bp-6ef95aee-65c6-480d-bf2d-9b8442110725
bp-ab77eaaa-47a6-4168-87c9-399d62110725
bp-5e20900c-bc97-4b19-8695-c1ecc2110725
bp-4e9ebab4-1269-48c0-bf44-fbf382110723
bp-4260632d-849d-46f8-80bf-266282110723
bp-c940d811-b334-4e64-8ae0-803152110723
bp-db9c8220-4022-49ba-875f-f29062110723
bp-e895da5d-756f-4ff3-986e-4d9b72110723
bp-82a5dc65-34c5-4cdc-adc6-5e40f2110723
bp-4b579de5-4215-4c92-8ab1-467d82110723
bp-f7b65e9f-0a99-48ee-b25b-a90bb2110711
bp-d341ae09-afde-4d7e-b6a2-5e9812110611
bp-e5f802c7-16d9-4646-b1d3-851292110611
bp-ca5d32c6-9524-4d44-b997-4611b2110606
bp-7d83d411-e54c-484f-ae1a-feac72110605
bp-5eaf3a88-d543-4568-b74c-ac9ee2110604
bp-4be28907-5561-4ea3-901d-da4182110604
bp-5e774557-ed86-48c8-8b37-42c5e2110604
bp-f4ce341a-5a50-402d-bcae-688e92110520
bp-0ff20668-04ed-4e7d-a2a0-c84af2110520
bp-256a209b-ae3c-41ea-9f61-41dfc2110520
bp-8dd9daf5-72a0-4152-ac2c-7e9052110520
bp-0657bdbc-8f78-4409-8f08-570a32110520
bp-5f465910-1e2b-4bb3-8cde-54e342110520
bp-046e1283-4d09-4c57-902c-5b6a42110520
bp-3f36cd4d-f308-4bbf-b28f-1c35b2110520
bp-9f0b1a72-7a1b-49a7-8e97-07c912110520
bp-5025bdfc-2623-4495-b2a3-d9db32110520
bp-fb647446-13d7-4d9e-8c88-4ca4f2110520
bp-b18d7242-8609-4796-b1e0-6fdb82110519
bp-75a46e83-54e3-4d79-9d17-8e03a2110519
bp-028f2d15-2287-4b8c-9dc9-def222110519
bp-683d1d3e-ff0c-412b-b248-444932110519
bp-fea3c9e5-ce18-4d07-b2d2-7876a2110519
bp-99378966-0932-4290-818c-941dc2110519
bp-3b906b14-900c-4a13-bf77-ce1772110519
bp-79f568b7-6b8d-4b47-848d-70e1f2110518
bp-a9dbdcc0-8516-4b11-be5a-800e02110518
bp-56d890a8-f14d-46c7-a3ea-f0a0d2110518
bp-55aaf110-cdb8-49cd-8889-391502110518

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.