Bug 1388299

Summary: tab crashes when uploading big attachment
Product: [Fedora] Fedora Reporter: Jan Hutař <jhutar>
Component: selinux-policy-targetedAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED CURRENTRELEASE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 24CC: dwalsh, gecko-bugs-nobody, jhorak, jhutar, pjasicek, stransky
Target Milestone: ---Keywords: SELinux
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-07-26 05:36:11 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Jan Hutař 2016-10-25 05:12:31 UTC
Description of problem:
I have multiprocess feature enabled and tab crashes when uploading big attachment


Version-Release number of selected component (if applicable):
firefox-49.0-2.fc24.x86_64


How reproducible:
always


Steps to Reproduce:
1. Go to e.g. https://bugzilla.redhat.com/attachment.cgi?bugid=1388297&action=enter
2. Attempt to upload 306K big file:
   # ls -lh /var/log/Xorg.0.log.old 
   -rw-r--r--. 1 root root 306K Oct 24 19:04 /var/log/Xorg.0.log.old


Actual results:
Bad news first: This tab has crashed


Expected results:
Should work


Additional info:
Output on terminal when I start firefox from it (no other FF running before that) with `firefox -P work`:

###!!! [Parent][MessageChannel] Error: (msgtype=0x2C007A,name=PBrowser::Msg_Destroy) Channel error: cannot send/recv


###!!! [Parent][MessageChannel] Error: (msgtype=0x2C007A,name=PBrowser::Msg_Destroy) Channel error: cannot send/recv

[Parent 2894] WARNING: pipe error (65): Connection reset by peer: file /builddir/build/BUILD/firefox-49.0/firefox-49.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 316
[Parent 2894] WARNING: pipe error (72): Connection reset by peer: file /builddir/build/BUILD/firefox-49.0/firefox-49.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 316

Comment 2 Martin Stransky 2016-10-25 07:11:10 UTC
Is selinux policy enforced? If so can you please try permissive mode? The plugin-container may not have needed rights.

Comment 4 Jan Hutař 2016-10-25 07:35:31 UTC
Wow. You are right - had no idea this might be the reason (it worked with smaller file I have copied to /tmp and modified - that probably changed SELinux labels). Anyway, with permissive I got:

type=AVC msg=audit(1477380548.726:363): avc:  denied  { read } for  pid=4327 comm="Chrome_ChildThr" path="/var/log/upgrade.log" dev="dm-1" ino=2624029 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1

and with enforcing:

type=AVC msg=audit(1477380834.056:385): avc:  denied  { read } for  pid=4735 comm="Chrome_ChildThr" path="/var/log/boot.log" dev="dm-1" ino=2621454 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:plymouthd_var_log_t:s0 tclass=file permissive=0
type=ANOM_ABEND msg=audit(1477380834.056:386): auid=1000 uid=1000 gid=1000 ses=2 subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 pid=4735 comm="Chrome_ChildThr" exe="/usr/lib64/firefox/plugin-container" sig=11

SELinux packages versions are:

selinux-policy-targeted-3.13.1-191.19.fc24.noarch
libselinux-2.5-9.fc24.x86_64

Comment 5 Fedora End Of Life 2017-07-25 23:36:10 UTC
This message is a reminder that Fedora 24 is nearing its end of life.
Approximately 2 (two) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 24. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as EOL if it remains open with a Fedora  'version'
of '24'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version'
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before Fedora 24 is end of life. If you would still like
to see this bug fixed and are able to reproduce it against a later version
of Fedora, you are encouraged  change the 'version' to a later Fedora
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's
lifetime, sometimes those efforts are overtaken by events. Often a
more recent Fedora release includes newer upstream software that fixes
bugs or makes them obsolete.

Comment 6 Jan Hutař 2017-07-26 05:34:17 UTC
Created attachment 1304589 [details]
test

Comment 7 Jan Hutař 2017-07-26 05:36:11 UTC
Works for me now with:

selinux-policy-targeted-3.13.1-259.fc26.noarch
libselinux-2.6-6.fc26.x86_64
firefox-54.0-2.fc26.x86_64