MOZ_ASSERT on about:tor
Summary
about:tor
crashes in debug builds, because a MOZ_ASSERT
is triggered.
Steps to reproduce:
- Compile Tor Browser with
ac_add_options --enable-debug
in themozconfig
- Run Tor Browser
- Connect to the Tor network
- You will see the tab crashing
- Try to go to any other address, it will work
- Try to write
about:tor
in the address bar, and go there: the tab will crash
What is the current bug behavior?
The tab crashes, and Tor Browser asks you whether you want to reload it. But if you press it, the tab crashes again. Other tabs work normally.
If you attach a debugger to Tor Browser, it will stop in one of the MOZ_ASSERT
of nsresult NS_CompareLoadInfoAndLoadContext(nsIChannel* aChannel)
.
File: netwerk/base/nsNetUtil.cpp
, line: around 3092 (the first MOZ_ASSERT
of the function).
Visual Studio tells that it is a dereferenced nullptr
, but I do not understand why (it seem to me it is using normal objects allocated on stack; I will have to investigate more).
What is the expected behavior?
I wanted to see the normal about:tor
page
Environment
I tested on a 91.3.0/11.0.1 Windows build compiled by me, with ac_add_options --enable-debug
.
This happened both on Windows 10 and Windows 11.
This happens on Linux as well (remember to update the build
as well, to copy debug geckodriver
).