Re: firefox3-bin crashes near arc4random_buf()

From: Jos Backus <jos_at_catnook.com>
Date: Thu, 9 Oct 2008 09:38:55 -0700
On Tue, Oct 07, 2008 at 06:50:09PM -0700, Tim Kientzle wrote:
> This is a lot more interesting.  This points to a crash
> within libc's db code.  Somehow, it's trying to compute
> a hash for some element with length -10618, which is
> getting converted to an unsigned 4294956678, which is
> causing the crash.
> 
> Does Firefox have knobs to use a newer Berkeley DB?

Not that I am aware of. Maybe I should ask ports_at_...

> I can't
> recall whether newer Berkeley DB versions are thread-safe but
> I'm pretty sure the old version in our libc isn't.  If Firefox
> is assuming the BDB code is thread-safe that could certainly
> cause corruption of the BDB data with all sorts of unpleasant
> consequences.  That's just a random guess, though.  Maybe someone
> else on this mailing list knows better.

I think you're on to something.
 
Also, I have found a reliable way to cause the crash. It happens when I go to
https://wellpointnextrx.com/ and try to accept the cert for the session.

-- 
Jos Backus
jos at catnook.com
Received on Thu Oct 09 2008 - 14:38:37 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:36 UTC