Open Bug 730633 Opened 8 years ago Updated 5 years ago

crash in nsNSSSocketInfo::SetCertVerificationResult or nsNSSSocketInfo::StartTLS @ dyld_stub_binder

Categories

(Core :: Security, defect, critical)

11 Branch
x86_64
macOS
defect
Not set
critical

Tracking

()

People

(Reporter: marcia, Unassigned)

Details

(Keywords: crash, regression, Whiteboard: [startupcrash])

Crash Data

This bug was filed from the Socorro interface and is 
report bp-48fea197-e322-47cb-9aaa-09f5c2120225 .
============================================================= 

Seen while looking at B4 data. https://crash-stats.mozilla.com/report/list?signature=dyld_stub_binder_
and https://crash-stats.mozilla.com/report/list?signature=dyld_stub_binder

Low volume signature that was present in 11.0b3 and may be extension related. Will try to hunt down some manual correlations.

Frame 	Module 	Signature 	Source
0 		@0x7fff63c7306d 	
1 	libdyld.dylib 	dyld_stub_binder_ 	
2 	XUL 	nsNSSSocketInfo::StartTLS 	security/manager/ssl/src/nsNSSIOLayer.cpp:889
3 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:670
4 	XUL 	PL_DHashTableOperate 	obj-firefox/x86_64/xpcom/build/pldhash.cpp:428
dyld_stub_binder are on Mac OS X 10.6 and dyld_stub_binder_ are one Mac OS X 10.7.

It seems a regression from 11.0 as stacks in previous versions don't contain those security function calls: nsNSSSocketInfo::StartTLS and nsNSSSocketInfo::SetCertVerificationResult.

It happens only with 64-bit processors and on startup (max uptime: 156 sec).

Some stacks also look like:
Frame 	Module 	Signature 	Source
0 		@0x7fff5fc01065 	
1 	libSystem.B.dylib 	dyld_stub_binder 	
2 	libSystem.B.dylib 	pthread_mutex_lock 	
3 	XUL 	nsNSSSocketInfo::SetCertVerificationResult 	security/manager/ssl/src/nsNSSIOLayer.cpp:976
4 	XUL 	mozilla::psm::SSLServerCertVerificationResult::Run 	security/manager/ssl/src/SSLServerCertVerification.cpp:749
5 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:660
6 	XUL 	NS_ProcessNextEvent_P 	obj-firefox/x86_64/xpcom/build/nsThreadUtils.cpp:245
7 	XUL 	nsSocketTransportService::Run 	netwerk/base/src/nsSocketTransportService2.cpp:649
8 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:660
9 	XUL 	NS_ProcessNextEvent_P 	obj-firefox/x86_64/xpcom/build/nsThreadUtils.cpp:245
10 	XUL 	nsThread::ThreadFunc 	xpcom/threads/nsThread.cpp:292
11 	libnspr4.dylib 	_pt_root 	nsprpub/pr/src/pthreads/ptthread.c:187
12 	libSystem.B.dylib 	_pthread_start 	
13 	libSystem.B.dylib 	thread_start 	
14 	libnspr4.dylib 	PR_JoinThread 	nsprpub/pr/src/pthreads/ptthread.c:577
Component: General → Security
Keywords: regression
Product: Firefox → Core
QA Contact: general → toolkit
Hardware: All → x86_64
Summary: crash dyld_stub_binder_ → crash in nsNSSSocketInfo::SetCertVerificationResult or nsNSSSocketInfo::StartTLS @ dyld_stub_binder
Whiteboard: [startupcrash]
I found this signature that seems to be the same issue:

[@ libdyld.dylib@0x1715 ]
Crash Signature: [@ dyld_stub_binder_] [@ dyld_stub_binder ] → [@ dyld_stub_binder_] [@ dyld_stub_binder ] [@ libdyld.dylib@0x1715 ]
You need to log in before you can comment on or make changes to this bug.