HANG - When security module beid_ff_pkcs11.dll is loaded (Belgium eID PKCS#11 Module)

RESOLVED FIXED

Status

()

Core
Security
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: Thomas Bertels, Unassigned)

Tracking

({hang, reproducible})

18 Branch
x86
Windows XP
hang, reproducible
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments, 1 obsolete attachment)

(Reporter)

Description

5 years ago
Created attachment 701429 [details]
WinDbg log

Steps to reproduce:
- Start Firefox 18.0
- Install the "eID Belgique" extension with Firefox version 1.0.18 (https://addons.mozilla.org/fr/firefox/addon/belgium-eid/versions/?page=1#version-1.0.18)
- Restart Firefox
- Close Firefox

Results:
Firefox hangs

Reproduced with 21.0a1 (2013-01-11)

I created a debug log and a dump with WinDbg (attached to this bug).
Here's the most relevant part:

>ModLoad: 05100000 0515d000   C:\Program Files\Mozilla Firefox\nssckbi.dll
>Belgium eID: Failed to load module beid_ff_pkcs11.dll with the name Belgium >eID PKCS#11 Module - beid_ff_pkcs11.dll: Error NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIPKCS11.addModule]
(Reporter)

Comment 1

5 years ago
The debug log is attached to this bug.
I keep the (28 MB zipped) memory dump in case it would be useful.
Severity: critical → normal

Comment 2

5 years ago
Ziggy, have you seen support requests about this by chance?

Comment 3

5 years ago
I see someone complaining about this issue on the extension page (in Dutch), so it may be quite common. https://addons.mozilla.org/fr/firefox/addon/belgium-eid/reviews/413068/

This extension is needed by all Belgian citizens to access their Identity Card reader from Firefox. They have to install it in order to report their taxes to the tax office website ("taxonweb.be") at least once a year.
(Reporter)

Comment 4

5 years ago
Created attachment 701870 [details]
WinDbg log pk11slot

This one was created on a different computer, after uninstalling the eID program (and removing the associated Firefox extension and browser security module) and then installing the latest version.

This eID program actually needs to be installed (no reader needed) to have a chance to reproduce. You can find it at http://eid.belgium.be/en/using_your_eid/installing_the_eid_software/

The WinDbg log seems to point to http://mxr.mozilla.org/mozilla-release/source/security/nss/lib/pk11wrap/pk11slot.c#423

Comment 5

5 years ago
I have not encountered such behavior but in a single case where a user could not get Firefox to start with their preferred add-ons (including the EID add-on) enabled. Consequently, Firefox was able to start in safe mode and with everything disabled. However, we did not conclude that the problem was solely related to EID, so I don't know if this is relevant.

I also don't seem to be able to reproduce this in Firefox 18 using Windows 7 x64.
(Reporter)

Comment 6

5 years ago
I couldn't reproduce it on a third computer with Windows 7 x86 either, so it seems to be limited to Windows XP.

Comment 7

5 years ago
Hi Thomas, thank you for reporting, I'll try to reproduce it.

Do you have both the beidpkcs11.dll and the beid_ff_pkcs11.dll modules attached in Firefox when you see this error?
(Reporter)

Comment 8

5 years ago
Created attachment 717902 [details]
WinDbg log pk11slot middleware 4.0.4

Actually, the "Failed to load module beid_ff_pkcs11.dll" error isn't returned anymore with the version 4.0.4 of the middleware.
The second stack trace and this one have both been retrieved with that version.
But there's still a hang, and the stack trace seems to point at beid_ff_pkcs11.dll.
There's no more hang if I remove the beid security module.
To be reproduced, the hang needs a few seconds or minutes of usage.
Attachment #701429 - Attachment is obsolete: true
(Reporter)

Comment 9

5 years ago
You're welcome.
The beidpkcs11.dll module isn't currently loaded. I can't tell if it was when the first stack trace was retrieved however.
Summary: HANG - Failed to load module beid_ff_pkcs11.dll with the name Belgium eID PKCS#11 Module → HANG - When security module beid_ff_pkcs11.dll is loaded (Belgium eID PKCS#11 Module)

Comment 10

5 years ago
Hello Thomas,

I was able to reproduce the issue.
Following beid_ff_pkcs11.dll fixed it for me:
http://code.google.com/p/eid-mw/downloads/detail?name=beid_ff_pkcs11_4017356.dll&can=2&q=#makechanges

Might I ask you to check if this fixes your issue too?
(could you place the above dll in windows/system32? you'll have to rename it to beid_ff_pkcs11.dll though (google code doesn't like same name uploaded twice))
If you prefer an installer, just let me know, happy to build one.
(Reporter)

Comment 11

5 years ago
I can't reproduce it anymore with that version.

Thank you for the very fast fix Frederik!
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.