Bug 1780060

Summary: Tabs crashed in firefox with glibc-2.30.9000-22
Product: [Fedora] Fedora Reporter: Lukas Slebodnik <lslebodn>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: 0xalen+redhat, anto.trande, fweimer, gecko-bugs-nobody, jhorak, john.j5live, kengert, pjasicek, rhughes, rstrode, sandmann, stransky
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-12-05 11:39:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Lukas Slebodnik 2019-12-05 10:32:22 UTC
Description of problem:
I upgraded few pacakges on my system and I initially thought that crash is caused by upgrade of firefox to firefox-71.0-8.npgo.fc32.x86_64.
But downgrade did not help. Therefore I tried to downgrade other packages.

Version-Release number of selected component (if applicable):
firefox-71.0-8.npgo.fc32.x86_64
glibc-2.30.9000-22.fc32.x86_64

How reproducible:
Deterministic on my env

Steps to Reproduce:
1. # run firefox and try to open some website

Actual results:
           PID: 6575 (Web Content)
           UID: 1000 (user)
           GID: 1000 (user)
        Signal: 31 (SYS)
     Timestamp: Thu 2019-12-05 11:18:34 CET (12min ago)
  Command Line: /usr/lib64/firefox/firefox -contentproc -childID 9 -isForBrowser -prefsLen 7240 -prefMapSize 258782 -parentBuildID 20191128104533 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 6041 tab
    Executable: /usr/lib64/firefox/firefox
 Control Group: /user.slice/user-1000.slice/session-2.scope
          Unit: session-2.scope
         Slice: user-1000.slice
       Session: 2
     Owner UID: 1000 (user)
       Boot ID: ee93cb3b1a754908b965f5a7a57153ec
    Machine ID: 52d5476f250e4edb9221538b3585f1b3
       Storage: /var/lib/systemd/coredump/core.Web\x20Content.1000.ee93cb3b1a754908b965f5a7a57153ec.6575.1575541114000000000000.lz4
       Message: Process 6575 (Web Content) of user 1000 dumped core.
                
                Stack trace of thread 6575:
                #0  0x00007fa36d7c19a8 __GI___open_nocancel (ld-linux-x86-64.so.2 + 0x1d9a8)
                #1  0x00007fa36d7ac8bf open_verify.constprop.0 (ld-linux-x86-64.so.2 + 0x88bf)
                #2  0x00007fa36d7ae3d6 _dl_map_object (ld-linux-x86-64.so.2 + 0xa3d6)
                #3  0x00007fa36d7b9109 dl_open_worker (ld-linux-x86-64.so.2 + 0x15109)
                #4  0x00007fa36d34f368 _dl_catch_exception (libc.so.6 + 0x13c368)
                #5  0x00007fa36d7b8c9b _dl_open (ld-linux-x86-64.so.2 + 0x14c9b)
                #6  0x00007fa36d73b39c dlopen_doit (libdl.so.2 + 0x239c)
                #7  0x00007fa36d34f368 _dl_catch_exception (libc.so.6 + 0x13c368)
                #8  0x00007fa36d34f433 _dl_catch_error (libc.so.6 + 0x13c433)
                #9  0x00007fa36d73bb09 _dlerror_run (libdl.so.2 + 0x2b09)
                #10 0x00007fa36d73b42a dlopen@@GLIBC_2.2.5 (libdl.so.2 + 0x242a)
                #11 0x00007fa36d766c27 g_module_open (libgmodule-2.0.so.0 + 0x1c27)
                #12 0x00007fa36b8a4939 g_io_module_load_module (libgio-2.0.so.0 + 0x7f939)
                #13 0x00007fa36b79c82b g_type_module_use (libgobject-2.0.so.0 + 0x3a82b)
                #14 0x00007fa36b8a467e lazy_load_modules.isra.0 (libgio-2.0.so.0 + 0x7f67e)
                #15 0x00007fa36b8a54e6 g_io_extension_point_get_extensions (libgio-2.0.so.0 + 0x804e6)
                #16 0x00007fa36b8a5d09 _g_io_module_get_default (libgio-2.0.so.0 + 0x80d09)
                #17 0x00007fa36b88f832 g_file_new_for_uri (libgio-2.0.so.0 + 0x6a832)
                #18 0x00007fa36c0a6f3d gtk_css_provider_load_from_resource (libgtk-3.so.0 + 0x19df3d)
                #19 0x00007fa36c0a729b _gtk_css_provider_load_named (libgtk-3.so.0 + 0x19e29b)
                #20 0x00007fa36c1e6bbb settings_update_theme (libgtk-3.so.0 + 0x2ddbbb)
                #21 0x00007fa36c1ea12e gtk_settings_get_for_display (libgtk-3.so.0 + 0x2e112e)
                #22 0x00007fa36680d135 _ZN13nsLookAndFeel10EnsureInitEv (libxul.so + 0x2f77135)
                #23 0x00007fa36680ed9f _ZN13nsLookAndFeel14NativeGetColorEN7mozilla16StyleSystemColorERj (libxul.so + 0x2f78d9f)
                #24 0x00007fa3667bc296 _ZN15nsXPLookAndFeel12GetColorImplEN7mozilla16StyleSystemColorEbRj (libxul.so + 0x2f26296)
                #25 0x00007fa3676f3575 _ZN12nsWebBrowser6CreateEP19nsIWebBrowserChromeP9nsIWidgetRKN7mozilla16OriginAttributesEPNS4_3dom15BrowsingContextEPNS8_17WindowGlobalChildEb (libxul.so + 0x3e5d575)
                #26 0x00007fa3664f843d _ZN7mozilla3dom12BrowserChild4InitEP18mozIDOMWindowProxyPNS0_17WindowGlobalChildE (libxul.so + 0x2c6243d)
                #27 0x00007fa3664be6e0 _ZN7mozilla3dom12ContentChild20RecvConstructBrowserEONS_3ipc15ManagedEndpointINS0_13PBrowserChildEEEONS3_INS0_18PWindowGlobalChildEEERKNS0_6IdTypeINS0_13BrowserParentEEESE_RKNS0_13IPCTabContextERKNS0_16WindowGlobalInitERKjRKNSA_INS0_13ContentParentEEERKbSS_ (libxul.so + 0x2c286e0)
                #27 0x00007fa3664be6e0 _ZN7mozilla3dom12ContentChild20RecvConstructBrowserEONS_3ipc15ManagedEndpointINS0_13PBrowserChildEEEONS3_INS0_18PWindowGlobalChildEEERKNS0_6IdTypeINS0_13BrowserParentEEESE_RKNS0_13IPCTabContextERKNS0_16WindowGlobalInitERKjRKNSA_INS0_13ContentParentEEERKbSS_ (libxul.so + 0x2c286e0)
                #28 0x00007fa3647e7c8e _ZN7mozilla3dom13PContentChild17OnMessageReceivedERKN3IPC7MessageE (libxul.so + 0xf51c8e)
                #29 0x00007fa36472f61b _ZN7mozilla3ipc14MessageChannel20DispatchAsyncMessageEPNS0_19ActorLifecycleProxyERKN3IPC7MessageE (libxul.so + 0xe9961b)
                #30 0x00007fa3647383f6 _ZN7mozilla3ipc14MessageChannel15DispatchMessageEON3IPC7MessageE (libxul.so + 0xea23f6)
                #31 0x00007fa364739da6 _ZN7mozilla3ipc14MessageChannel11MessageTask3RunEv (libxul.so + 0xea3da6)
                #32 0x00007fa36423e5d5 _ZN7mozilla14SchedulerGroup8Runnable3RunEv (libxul.so + 0x9a85d5)
                #33 0x00007fa364248b91 _ZN8nsThread16ProcessNextEventEbPb (libxul.so + 0x9b2b91)
                #34 0x00007fa36424ac3c _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so + 0x9b4c3c)
                #35 0x00007fa36472952a _ZN7mozilla3ipc11MessagePump3RunEPN4base11MessagePump8DelegateE (libxul.so + 0xe9352a)
                #36 0x00007fa3646f17c9 _ZN11MessageLoop3RunEv (libxul.so + 0xe5b7c9)
                #37 0x00007fa3667abe4c _ZN14nsBaseAppShell3RunEv (libxul.so + 0x2f15e4c)
                #38 0x00007fa36788ab77 _Z15XRE_RunAppShellv (libxul.so + 0x3ff4b77)
                #39 0x00007fa3646f17c9 _ZN11MessageLoop3RunEv (libxul.so + 0xe5b7c9)
                #40 0x00007fa36788afaa _Z20XRE_InitChildProcessiPPcPK12XREChildData (libxul.so + 0x3ff4faa)
                #41 0x00005615e4e47d4b _Z20content_process_mainPN7mozilla9BootstrapEiPPc (firefox + 0xfd4b)
                #42 0x00005615e4e475f6 main (firefox + 0xf5f6)
                #43 0x00007fa36d23a133 __libc_start_main (libc.so.6 + 0x27133)
                #44 0x00005615e4e4792e _start (firefox + 0xf92e)
                
                Stack trace of thread 6580:
                #0  0x00007fa36d30f02d syscall (libc.so.6 + 0xfc02d)
                #1  0x00007fa36470562e epoll_wait (libxul.so + 0xe6f62e)
                #2  0x00007fa3647078b5 epoll_dispatch (libxul.so + 0xe718b5)
                #3  0x00007fa36470a109 event_base_loop (libxul.so + 0xe74109)
                #4  0x00007fa3646efdde _ZN4base19MessagePumpLibevent3RunEPNS_11MessagePump8DelegateE (libxul.so + 0xe59dde)
                #5  0x00007fa3646f17c9 _ZN11MessageLoop3RunEv (libxul.so + 0xe5b7c9)
                #6  0x00007fa364703ae2 _ZN4base6Thread10ThreadMainEv (libxul.so + 0xe6dae2)
                #7  0x00007fa3646efa9e _ZL10ThreadFuncPv (libxul.so + 0xe59a9e)
                #8  0x00007fa36d749482 start_thread (libpthread.so.0 + 0x9482)
                #9  0x00007fa36d314533 __clone (libc.so.6 + 0x101533)

Expected results:
No crash

Additional info:
https://retrace.fedoraproject.org/faf/reports/2773196/

Comment 1 Lukas Slebodnik 2019-12-05 10:34:17 UTC
I tried the latest glibc from koji(glibc-2.30.9000-22)  but it did not help.
Adding glibc guys to CC

Comment 2 Lukas Slebodnik 2019-12-05 10:35:44 UTC
My workaround was to downgrade back to glibc-2.30.9000-20.fc32.x86_64
(I did not try -21)

Comment 3 Lukas Slebodnik 2019-12-05 11:32:48 UTC
(In reply to Lukas Slebodnik from comment #1)
> I tried the latest glibc from koji(glibc-2.30.9000-22)  but it did not help.
> Adding glibc guys to CC

ehm, typo glibc-2.30.9000-23

sh# dnf history info 2821
Transaction ID : 2821
Begin time     : Thu 05 Dec 2019 11:17:40 AM CET
Begin rpmdb    : 2048:0874d0274a3a19ad9a0f95cccbbdfe3611ff83cf
End time       : Thu 05 Dec 2019 11:18:08 AM CET (28 seconds)
End rpmdb      : 2048:dd70e690457eb245c232f270d465856a0481b7eb
Return-Code    : Success
Releasever     : 32
Command Line   : update https://kojipkgs.fedoraproject.org//packages/glibc/2.30.9000/23.fc32/x86_64/glibc-2.30.9000-23.fc32.x86_64.rpm https://kojipkgs.fedoraproject.org//packages/glibc/2.30.9000/23.fc32/x86_64/glibc-all-langpacks-2.30.9000-23.fc32.x86_64.rpm https://kojipkgs.fedoraproject.org//packages/glibc/2.30.9000/23.fc32/x86_64/glibc-common-2.30.9000-23.fc32.x86_64.rpm https://kojipkgs.fedoraproject.org//packages/glibc/2.30.9000/23.fc32/x86_64/glibc-devel-2.30.9000-23.fc32.x86_64.rpm https://kojipkgs.fedoraproject.org//packages/glibc/2.30.9000/23.fc32/x86_64/glibc-headers-2.30.9000-23.fc32.x86_64.rpm
Packages Altered:
    Upgrade  glibc-2.30.9000-23.fc32.x86_64               @@commandline
    Upgraded glibc-2.30.9000-22.fc32.x86_64               @@System
    Upgrade  glibc-all-langpacks-2.30.9000-23.fc32.x86_64 @@commandline
    Upgraded glibc-all-langpacks-2.30.9000-22.fc32.x86_64 @@System
    Upgrade  glibc-common-2.30.9000-23.fc32.x86_64        @@commandline
    Upgraded glibc-common-2.30.9000-22.fc32.x86_64        @@System
    Upgrade  glibc-devel-2.30.9000-23.fc32.x86_64         @@commandline
    Upgraded glibc-devel-2.30.9000-22.fc32.x86_64         @@System
    Upgrade  glibc-headers-2.30.9000-23.fc32.x86_64       @@commandline
    Upgraded glibc-headers-2.30.9000-22.fc32.x86_64       @@System

Comment 4 Martin Stransky 2019-12-05 11:39:21 UTC

*** This bug has been marked as a duplicate of bug 1778366 ***