I've been doing development with a windows build (built with VS2005) that I start like this:

firefox -profile p -chrome chrome://browser/content/places/places.xul

After some time, a timer fires and the application update service pings the aus server, which is loaded using https. This causes a bunch of security stuff to initialize, which asserts and crashes. Here's some of the stack:

msvcr80d.dll!__loctotime64_t(int yr=1617, int mo=11, int dy=3, int hr=1, int mn=26, int sc=9, int dstflag=-1) Line 67 + 0x57 bytes C msvcr80d.dll!__time64_t_from_ft(_FILETIME * pft=0x0012c52c) Line 253 + 0x25 bytes C msvcr80d.dll!_findnext64i32(int hFile=1478872, _finddata64i32_t * pfd=0x0012c684) Line 187 + 0xc bytes C freebl3.dll!EnumSystemFiles(int (const char *)* func=0x042c2f20) Line 277 + 0x14 bytes C
freebl3.dll!ReadSystemFiles()  Line 320 + 0xa bytes     C
freebl3.dll!RNG_SystemInfoForRNG()  Line 462    C
softokn3.dll!RNG_SystemInfoForRNG()  Line 1633  C
softokn3.dll!nsc_CommonInitialize(void * pReserved=0x0012cc28, int isFIPS=0) Line 2988 C softokn3.dll!NSC_Initialize(void * pReserved=0x0012cc28) Line 3052 + 0xb bytes C nss3.dll!secmod_ModuleInit(SECMODModuleStr * mod=0x03a70778, int * alreadyLoaded=0x0012ccc8) Line 150 + 0xf bytes C nss3.dll!SECMOD_LoadPKCS11Module(SECMODModuleStr * mod=0x03a70778) Line 322 + 0xd bytes C
...


It actually crashes in a system dll. It thinks the creation time of one of the files in my system directory is year 1617, which it does not like. I understand that this crashing is a bug and I should probably file it, but Darin and I looked at the code that was calling into this - Enum/ReadSystemFiles... and it looked like it was doing this to seed the random number generator. Is this the best way to collect entropy? Might it not be that two systems have pretty similar system directories? (Especially as limited user accounts become more prevalent)?

-Ben
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to