Bug 1057814

Summary: firefox: mozalloc_abort(): plugin-container killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Ryan Spinuzzi <ryan>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: blackpearl, bztdlinux, code, darthludi, elad, fry.kun, gecko-bugs-nobody, germano.massullo, gigalamer, hancockrwd, hlx98007, marcos.souza.org, mothlight, psmcevoy, redhat, rehol3, rob.d.wills, robyirloreto, ryan, sheepdestroyer, stransky, twaugh, vincenzo.pupillo
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/7015b34754b4db9899b74136ed4133251c2151f9
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-24 12:28:08 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
abrt stuff none

Description Ryan Spinuzzi 2014-01-25 01:23:18 UTC
Version-Release number of selected component:
firefox-26.0-6.fc20

Additional info:
reporter:       libreport-2.1.11
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/plugin-container /usr/lib64/IcedTeaPlugin.so -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 4865 true plugin
crash_function: mozalloc_abort
executable:     /usr/lib64/firefox/plugin-container
kernel:         3.12.8-300.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 mozalloc_abort at /usr/src/debug/firefox-26.0/mozilla-release/memory/mozalloc/mozalloc_abort.cpp:30
 #1 Abort at /usr/src/debug/firefox-26.0/mozilla-release/xpcom/base/nsDebugImpl.cpp:431
 #2 NS_DebugBreak at /usr/src/debug/firefox-26.0/mozilla-release/xpcom/base/nsDebugImpl.cpp:418
 #3 mozilla::plugins::PPluginInstanceChild::SendPPluginScriptableObjectConstructor at /usr/src/debug/firefox-26.0/mozilla-release/objdir/ipc/ipdl/PPluginInstanceChild.cpp:1400
 #4 mozilla::plugins::PluginInstanceChild::GetActorForNPObject at /usr/src/debug/firefox-26.0/mozilla-release/dom/plugins/ipc/PluginInstanceChild.cpp:2413
 #5 mozilla::plugins::PluginInstanceChild::AnswerNPP_GetValue_NPPVpluginScriptableNPObject at /usr/src/debug/firefox-26.0/mozilla-release/dom/plugins/ipc/PluginInstanceChild.cpp:645
 #6 mozilla::plugins::PPluginInstanceChild::OnCallReceived at /usr/src/debug/firefox-26.0/mozilla-release/objdir/ipc/ipdl/PPluginInstanceChild.cpp:2053
 #7 mozilla::plugins::PPluginModuleChild::OnCallReceived at /usr/src/debug/firefox-26.0/mozilla-release/objdir/ipc/ipdl/PPluginModuleChild.cpp:1023
 #8 mozilla::ipc::RPCChannel::DispatchIncall at /usr/src/debug/firefox-26.0/mozilla-release/ipc/glue/RPCChannel.cpp:472
 #9 mozilla::ipc::RPCChannel::Call at /usr/src/debug/firefox-26.0/mozilla-release/ipc/glue/RPCChannel.cpp:261

Comment 1 Ryan Spinuzzi 2014-01-25 01:23:21 UTC
Created attachment 855258 [details]
File: backtrace

Comment 2 Ryan Spinuzzi 2014-01-25 01:23:23 UTC
Created attachment 855259 [details]
File: cgroup

Comment 3 Ryan Spinuzzi 2014-01-25 01:23:24 UTC
Created attachment 855260 [details]
File: core_backtrace

Comment 4 Ryan Spinuzzi 2014-01-25 01:23:25 UTC
Created attachment 855261 [details]
File: dso_list

Comment 5 Ryan Spinuzzi 2014-01-25 01:23:27 UTC
Created attachment 855262 [details]
File: environ

Comment 6 Ryan Spinuzzi 2014-01-25 01:23:28 UTC
Created attachment 855263 [details]
File: exploitable

Comment 7 Ryan Spinuzzi 2014-01-25 01:23:29 UTC
Created attachment 855264 [details]
File: limits

Comment 8 Ryan Spinuzzi 2014-01-25 01:23:31 UTC
Created attachment 855265 [details]
File: maps

Comment 9 Ryan Spinuzzi 2014-01-25 01:23:32 UTC
Created attachment 855266 [details]
File: open_fds

Comment 10 Ryan Spinuzzi 2014-01-25 01:23:33 UTC
Created attachment 855267 [details]
File: proc_pid_status

Comment 11 Ryan Spinuzzi 2014-01-25 01:23:35 UTC
Created attachment 855268 [details]
File: var_log_messages

Comment 12 Martin Stransky 2014-03-06 10:54:53 UTC
This is an automated bug update. If you can reproduce the crash, please reopen the bug, remove [abrt] string from bug subject and provide us the reproduction steps.

Thanks!

Comment 13 Robert Hancock 2014-06-14 05:29:08 UTC
Just hit this on Firefox 30 when playing a YouTube video. It's not reproducible on demand as far as I can tell.

Comment 14 Vincenzo Pupillo 2014-06-16 20:47:46 UTC
Hi. I have the same problem.  My laptop run Fedora 20 on x86_64 using vanilla kernel and Nvidia binary driver.
The issue when you try to see a webpage with <video> tag.  You can reproduce the issue whatching this webpage http://dominik.honnef.co/posts/2013/03/writing_go_in_emacs/ . I this case the video tag 
is : 
<video controls=""><source src="/video/go_emacs/godef_mp4.mp4" type="video/mp4"><source src="/video/go_emacs/godef_ogg.ogg" type="video/ogg">
  Your browser does not support the video tag.
</video>

I think it was caused by h264 video stream.

Comment 15 Germano Massullo 2014-06-19 07:49:54 UTC
I can reproduce the bug on HTML5 version of video https://www.youtube.com/watch?v=GIF3fMKyuls
When I try to adjust the volume, Firefox crashes

Comment 16 Martin Stransky 2014-06-19 10:08:33 UTC
Can you attach a backtrace of the crash? (http://fedoraproject.org/wiki/Debugging_guidelines_for_Mozilla_products#Application_crash)
If it's html5 it's not related to flash/plugin-container.

Comment 17 Martin Stransky 2014-06-19 10:12:23 UTC
Also please try to disable gstreamer (see Bug 1105890).

Comment 18 Germano Massullo 2014-06-19 18:24:13 UTC
Another user experienced a similar problem:

If I adjust the audio volume of the video in the affected Youtube webpage, Firefox crashes

reporter:       libreport-2.2.2
backtrace_rating: 3
cmdline:        /usr/lib64/firefox/plugin-container /usr/lib64/flash-plugin/libflashplayer.so -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 6928 true plugin
crash_function: mozalloc_abort
executable:     /usr/lib64/firefox/plugin-container
kernel:         3.14.7-200.fc20.x86_64
package:        firefox-30.0-4.fc20
reason:         plugin-container killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 19 Germano Massullo 2014-06-19 18:38:48 UTC
Created attachment 910488 [details]
abrt stuff

I manually submit ABRT temp folder because it does not send infos to the bugreport

Comment 20 bztdlinux 2014-06-20 03:55:23 UTC
I hit this bug frequently when using Youtube's HTML5 mode and VP8 video. Generally within the first view Youtube videos viewed.

I do have the gstreamer plugin enabled. Maybe gstreamer is decoding the VP8, and that's causing the crash?

Comment 21 psmcevoy 2014-06-20 17:56:16 UTC
Another user experienced a similar problem:

Fedora 20 - all updates applied.
NFS home directory.

Firefox hangs repeatedly.  Sometimes after a long delay it comes back, sometimes it does not.  I had 3 tabs open.  The only thing that works every time to exit Firefox when it is hung is to click the X in the titlebar to force quit.

reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/plugin-container /usr/lib64/flash-plugin/libflashplayer.so -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 3281 true plugin
crash_function: mozalloc_abort
executable:     /usr/lib64/firefox/plugin-container
kernel:         3.14.8-200.fc20.x86_64
package:        firefox-30.0-4.fc20
reason:         plugin-container killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            1003

Comment 22 Konstantin Svist 2014-06-21 01:00:25 UTC
I thought the whole point of plugin-container was to prevent Firefox from going down when a plugin crashes...

Comment 23 Martin Stransky 2014-06-23 09:56:51 UTC
Please see Bug 1105890 for the HTML5 youtube crashes.

Comment 24 bztdlinux 2014-06-23 19:04:37 UTC
I think this is the same bug then, should it be marked as duplicate? The plugin-container thing is a red herring I think. This crash always happens for me on html5 video.

Comment 25 Martin Stransky 2014-06-24 12:28:08 UTC
Yes, it's a dupe of Bug 1105890.

*** This bug has been marked as a duplicate of bug 1105890 ***

Comment 26 Elad Alfassa 2014-09-10 12:00:02 UTC
Removing abrt hash, this causes CCs to be added to a bug that doesn't has anything to do with a plugin-container crash (this plugin-container crash would happen every time Firefox is crashing when the container is active with flash, it is not related to HTML5 directly)