Bug 1993821
| Summary: | SIGSEGV in plugin-container | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Andrey Motoshkov <motoskov> |
| Component: | firefox | Assignee: | Gecko Maintainer <gecko-bugs-nobody> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 35 | CC: | bjoern.daase, erack, gecko-bugs-nobody, jhorak, kai-engert-fedora, klaas, lruzicka, pjasicek, rhughes, richardfearn, rstrode, sandmann, stransky |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | firefox-92.0-3.fc35 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-09-24 20:23:05 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Andrey Motoshkov
2021-08-16 07:56:17 UTC
Backtrace:
Core was generated by `/usr/lib64/firefox/plugin-container /home/andreym/.mozilla/firefox/04v2gxrw.def'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 mozilla::gmp::GMPChild::ProcessingError (this=<optimized out>, aCode=<optimized out>, aReason=<optimized out>) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/dom/media/gmp/GMPChild.cpp:599
599 MOZ_CRASH("aborting because of MsgProcessingError");
[Current thread is 1 (Thread 0x7f79b9eb1100 (LWP 8538))]
(gdb) info threads
Id Target Id Frame
* 1 Thread 0x7f79b9eb1100 (LWP 8538) mozilla::gmp::GMPChild::ProcessingError (this=<optimized out>, aCode=<optimized out>, aReason=<optimized out>)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/dom/media/gmp/GMPChild.cpp:599
2 Thread 0x7f79b9eaa640 (LWP 8541) syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
(gdb) bt full
#0 mozilla::gmp::GMPChild::ProcessingError(mozilla::ipc::HasResultCodes::Result, char const*) (this=<optimized out>, aCode=<optimized out>, aReason=<optimized out>)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/dom/media/gmp/GMPChild.cpp:599
#1 0x00007f79bd2e2a07 in mozilla::ipc::IPCResult::Fail(mozilla::NotNull<mozilla::ipc::IProtocol*>, char const*, char const*)
(actor=actor@entry=..., where=where@entry=0x7f79c252528f "AnswerStartPlugin", why=why@entry=0x7f79c25252cc "Failed to load GMP.")
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/objdir/dist/include/nsTString.h:161
errorMsg =
{<nsTAutoStringN<char, 16>> = {<nsTString<char>> = {<nsTSubstring<char>> = {<mozilla::detail::nsTStringRepr<char>> = {mData = 0x7f79b9c2a5c8 "AnswerStartPlugin Failed to load GMP.\n", mLength = 38, mDataFlags = 5, mClassFlags = 3}, static kMaxCapacity = 2147483637}, <No data fields>}, mInlineCapacity = 15, mStorage = "\000\177\000\000*op\022\fV\000\000\067\000\000"}, <No data fields>}
#2 0x00007f79be03addd in mozilla::gmp::GMPChild::AnswerStartPlugin(nsTString<char16_t> const&) (this=this@entry=0x7f79b9c59c20, aAdapter=...)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/objdir/dist/include/mozilla/NotNull.h:225
__FUNCTION__ = "AnswerStartPlugin"
libPath =
{<nsTSubstring<char>> = {<mozilla::detail::nsTStringRepr<char>> = {mData = 0x7f79b9c8a488 "/home/andreym/.mozilla/firefox/04v2gxrw.default-1570082763056/gmp-widevinecdm/4.10.2209.1/libwidevinecdm.so", mLength = 107, mDataFlags = 5, mClassFlags = mozilla::detail::StringClassFlags::NULL_TERMINATED}, static kMaxCapacity = 2147483637}, <No data fields>}
__func__ = "AnswerStartPlugin"
platformAPI = 0x7f79b9c2a5c0
adapter = 0x7f79b9c25560
#3 0x00007f79bd37a3a1 in mozilla::gmp::PGMPChild::OnCallReceived(IPC::Message const&, IPC::Message*&) (this=0x7f79b9c59c20, msg__=..., reply__=@0x7ffe1f1b3cf0: 0x0)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/objdir/ipc/ipdl/PGMPChild.cpp:644
raiiObject628 = {mProfilingStack = 0x7f79b9c25240}
iter__ =
{iter_ = {mSegment = 0, mData = 0x7f79b9c5754c "", mDataEnd = 0x7f79b9c5754c "", mAbsoluteOffset = 60}, start_ = {mValue = {mUsedCanonicalNow = 0, mTimeStamp = 4122653092521}}}
adapter =
{<nsTSubstring<char16_t>> = {<mozilla::detail::nsTStringRepr<char16_t>> = {mData = 0x7f79b9c25768 u"chromium", mLength = 8, mDataFlags = 5, mClassFlags = mozilla::detail::StringClassFlags::NULL_TERMINATED}, <No data fields>}, <No data fields>}
id__ = 2147483647
route__ = <optimized out>
#4 0x00007f79bd2e05a2 in mozilla::ipc::MessageChannel::DispatchInterruptMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message&&, unsigned long)
(this=this@entry=0x7f79b9c59ce0, aProxy=aProxy@entry=0x7f79b9c25660, aMsg=..., stackDepth=stackDepth@entry=0)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/objdir/dist/include/mozilla/UniquePtrExtensions.h:182
reply =
{mTuple = {<mozilla::detail::CompactPairHelper<IPC::Message*, mozilla::DefaultDelete<IPC::Message>, (mozilla::detail::StorageType)1, (mozilla::detail::StorageType)0>> = {<mozilla::DefaultDelete<IPC::Message>> = {<No data fields>}, mFirstA = 0x0}, <No data fields>}}
rv = <optimized out>
lock = {mMonitor = <optimized out>}
#5 0x00007f79bd2d887b in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) (this=0x7f79b9c59ce0, aMsg=...)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/glue/MessageChannel.cpp:2009
unlock = {mMonitor = 0x7f79b9c57430}
transaction =
{mChan = 0x7f79b9c59ce0, mActive = false, mOutgoing = false, mNestedLevel = 1, mSeqno = 2, mTransaction = 0, mNext = 0x0, mReply = {mTuple = {<mozilla::detail::CompactPairHelper<IPC::Message*, mozilla::DefaultDelete<IPC::Message>, (mozilla::detail::StorageType)1, (mozilla::detail::StorageType)0>> = {<mozilla::DefaultDelete<IPC::Message>> = {<No data fields>}, mFirstA = 0x0}, <No data fields>}}}
id = 0
listenerProxy = {mRawPtr = 0x7f79b9c25660}
nojsapi =
{<mozilla::detail::MaybeStorage<mozilla::dom::AutoNoJSAPI, false>> = {<mozilla::detail::MaybeStorageBase<mozilla::dom::AutoNoJSAPI, false>> = {mStorage = {val = {<mozilla::dom::ScriptSettingsStackEntry> = {mGlobalObject = {<nsCOMPtr_base> = {mRawPtr = 0x7f79b9c026e8}, <No data fields>}, mType = 3206082409, mOlder = 0x7f79b9c00000}, <JSAutoNullableRealm> = {cx_ = 0x560c127029d0 <free(void*)+352>, oldRealm_ = 0x2e2e0}, mCx = 0x7f79b9d001e8, mExecutionYield = {mExecutionGrantingManager = {mRawPtr = 0x0}}}}}, mIsSome = 0 '\000'}, <mozilla::detail::Maybe_CopyMove_Enabler<mozilla::dom::AutoNoJSAPI, false, true, true>> = {<No data fields>}, <No data fields>}
reply =
{mTuple = {<mozilla::detail::CompactPairHelper<IPC::Message*, mozilla::DefaultDelete<IPC::Message>, (mozilla::detail::StorageType)1, (mozilla::detail::StorageType)0>> = {<mozilla::DefaultDelete<IPC::Message>> = {<No data fields>}, mFirstA = 0x0}, <No data fields>}}
#6 0x00007f79bf197595 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) (aTask=..., this=0x7f79b9c59ce0)
at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/glue/MessageChannel.cpp:1859
msg =
@0x7f79b9c8de90: {<mojo::core::ports::UserMessage> = {_vptr.UserMessage = 0x7f79c3a23d40 <vtable for IPC::Message+16>, type_info_ = 0x7f79c23192fb <IPC::Message::kUserMessageTypeInfo>}, <Pickle> = {static kSegmentAlignment = 8, buffers_ = {<InfallibleAllocPolicy> = {<No data fields>}, mOwning = true, mSegments = {<InfallibleAllocPolicy> = {<No data fields>}, static kElemIsPod = false, static kMaxInlineBytes = 999, static kInlineCapacity = 1, mBegin = 0x7f79b9c8dec0, mLength = 1, mTail = {<mozilla::Vector<mozilla::BufferList<InfallibleAllocPolicy>::Segment, 1, InfallibleAllocPolicy>::CapacityAndReserved> = {mCapacity = 1}, mBytes = "\020uŹy\177\000\000<\000\000\000\000\000\000\000h\000\000\000\000\000\000"}}, mSize = 60, mStandardCapacity = 4096}, header_ = 0x7f79b9c57510, header_size_ = 36}, static kUserMessageTypeInfo = {<No data fields>}, file_descriptor_set_ = {mRawPtr = 0x0}, attached_ports_ = {<nsTArray_Impl<mozilla::ipc::ScopedPort, nsTArrayInfallibleAllocator>> = {<nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_RelocateUsingMemutils>> = {mHdr = 0x7f79c14305b0 <sEmptyTArrayHeader>}, <nsTArray_TypedBase<mozilla::ipc::ScopedPort, nsTArray_Impl<mozilla::ipc::ScopedPort, nsTArrayInfallibleAllocator> >> = {<nsTArray_SafeElementAtHelper<mozilla::ipc::ScopedPort, nsTArray_Impl<mozilla::ipc::ScopedPort, nsTArrayInfallibleAllocator> >> = {<detail::nsTArray_CopyDisabler> = {<No data fields>}, <No data fields>}, <No data fields>}, <No data fields>}, <No data fields>}, create_time_ = {mValue = {mUsedCanonicalNow = 0, mTimeStamp = 0}}}
lock = {mMonitor = 0x7f79b9c57430}
#7 mozilla::ipc::MessageChannel::MessageTask::Run() (this=0x7f79b9c8de40) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/glue/MessageChannel.cpp:1890
lock = {mMonitor = 0x7f79b9c57430}
#8 0x00007f79bf18c9d0 in MessageLoop::RunTask(already_AddRefed<nsIRunnable>) (aTask=..., this=0x7ffe1f1b4050) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/chromium/src/base/message_loop.cc:454
log = {mWillRunAgain = false}
pending_task = {task = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, delayed_run_time = {ticks_ = 0}, sequence_num = 0, nestable = true}
#9 MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask&&) (pending_task=..., this=<optimized out>) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/chromium/src/base/message_loop.cc:463
pending_task = {task = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, delayed_run_time = {ticks_ = 0}, sequence_num = 0, nestable = true}
#10 MessageLoop::DoWork() (this=0x7ffe1f1b4050) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/chromium/src/base/message_loop.cc:538
pending_task = {task = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, delayed_run_time = {ticks_ = 0}, sequence_num = 0, nestable = true}
#11 0x00007f79bf18ebb0 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) (this=0x7f79b9c026d0, delegate=0x7ffe1f1b4050) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/chromium/src/base/message_pump_default.cc:35
did_work = <optimized out>
raiiObject22 = {mProfilingStack = 0x7f79b9c25240}
loop = <optimized out>
hangMonitor = {mThread = {mRawPtr = 0x0}, static kNoTimeout = 0}
#12 0x00007f79bf54eb6c in MessageLoop::RunInternal() (this=0x7ffe1f1b4050) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/objdir/dist/include/mozilla/RefPtr.h:280
save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0x7ffe1f1b4050, previous_state_ = 0x0}
#13 MessageLoop::RunHandler() (this=0x7ffe1f1b4050) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/chromium/src/base/message_loop.cc:324
save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0x7ffe1f1b4050, previous_state_ = 0x0}
#14 MessageLoop::Run() (this=this@entry=0x7ffe1f1b4050) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/chromium/src/base/message_loop.cc:306
save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0x7ffe1f1b4050, previous_state_ = 0x0}
#15 0x00007f79c0184c90 in XRE_InitChildProcess(int, char**, XREChildData const*) (aArgc=2, aArgv=0x7ffe1f1b4408, aChildData=<optimized out>) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/toolkit/xre/nsEmbedFunctions.cpp:742
process = {mTuple = {<mozilla::detail::CompactPairHelper<mozilla::ipc::ProcessChild*, mozilla::DefaultDelete<mozilla::ipc::ProcessChild>, (mozilla::detail::StorageType)1, (mozilla::detail::StorageType)0>> = {<mozilla::DefaultDelete<mozilla::ipc::ProcessChild>> = {<No data fields>}, mFirstA = 0x7f79b9c59c00}, <No data fields>}}
ioInterposerGuard = {<mozilla::detail::MaybeStorage<mozilla::IOInterposerInit, false>> = {<mozilla::detail::MaybeStorageBase<mozilla::IOInterposerInit, false>> = {mStorage = {val = {<No data fields>}}}, mIsSome = <optimized out>}, <mozilla::detail::Maybe_CopyMove_Enabler<mozilla::IOInterposerInit, false, true, true>> = {<No data fields>}, <No data fields>}
uiMessageLoop = {<base::MessagePump::Delegate> = {_vptr.Delegate = 0x7f79c3a23ab0 <vtable for MessageLoop+16>}, type_ = MessageLoop::TYPE_DEFAULT, id_ = 1, work_queue_ = std::queue wrapping: std::deque with 0 elements, delayed_work_queue_ = std::priority_queue wrapping: std::vector of length 0, capacity 0, deferred_non_nestable_work_queue_ = std::queue wrapping: std::deque with 0 elements, pump_ = {mRawPtr = 0x7f79b9c026d0}, destruction_observers_ = {observers_ = std::vector of length 1, capacity 1 = {0x7f79b9c2dbb0}, notify_depth_ = 0, type_ = base::ObserverList<MessageLoop::DestructionObserver, false>::NOTIFY_ALL}, nestable_tasks_allowed_ = false, exception_restoration_ = false, thread_name_ = "", incoming_queue_ = std::queue wrapping: std::deque with 0 elements, incoming_queue_lock_ = {<mozilla::OffTheBooksMutex> = {<mozilla::detail::MutexImpl> = {platformData_ = {0x0, 0x0, 0x3, 0x0, 0x0}}, <mozilla::BlockingResourceBase> = {<No data fields>}, <No data fields>}, <No data fields>}, state_ = 0x7ffe1f1b3f70, run_depth_base_ = 1, shutting_down_ = false, transient_hang_timeout_ = 0, permanent_hang_timeout_ = 0, next_sequence_num_ = 0, mEventTarget = {mRawPtr = 0x7f79b9c2dba0}}
raiiObject398 = {mProfilingStack = 0x0}
raiiObject400 = {<No data fields>}
raiiObject401 = {mProfilingStack = 0x7f79b9c25240}
exceptionHandlerIsSet = true
parentPIDString = <optimized out>
end = 0x7ffe1f1b6131 ""
parentPID = <optimized out>
exitManager = {lock_ = {<mozilla::OffTheBooksMutex> = {<mozilla::detail::MutexImpl> = {platformData_ = {0x0, 0x0, 0x3, 0x0, 0x0}}, <mozilla::BlockingResourceBase> = {<No data fields>}, <No data fields>}, <No data fields>}, stack_ = std::stack wrapping: std::deque with 0 elements, next_manager_ = 0x0}
rv = <optimized out>
uiLoopType = <optimized out>
#16 0x0000560c1270eaab in content_process_main(mozilla::Bootstrap*, int, char**) (bootstrap=0x7f79b9c2c620, argc=4, argv=0x7ffe1f1b4408) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/app/../contentproc/plugin-container.cpp:57
childData = {<No data fields>}
rv = <optimized out>
#17 0x0000560c127003e3 in main(int, char**) (argc=5, argv=0x7ffe1f1b4408) at /usr/src/debug/firefox-91.0-1.fc35.x86_64/ipc/app/MozillaRuntimeMain.cpp:72
ret = <optimized out>
While digging mozilla bugzilla I've found workaround: Run firefox with MOZ_DISABLE_GMP_SANDBOX=1 Upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1725828 (In reply to Andrey Motoshkov from comment #2) > While digging mozilla bugzilla I've found workaround: > Run firefox with MOZ_DISABLE_GMP_SANDBOX=1 How do you do it? I have tried `export MOZ_DISABLE_GMP_SANDBOX=1` but it does not seem to have any effect. (In reply to Lukas Ruzicka from comment #4) > (In reply to Andrey Motoshkov from comment #2) > > While digging mozilla bugzilla I've found workaround: > > Run firefox with MOZ_DISABLE_GMP_SANDBOX=1 > > How do you do it? I have tried `export MOZ_DISABLE_GMP_SANDBOX=1` but it > does not seem to have any effect. When opening firefox regularly - spotify web player does not work, displaying message that WidevineCdm plugin has crashed. When opening firefox from terminal (for passing env) - everything works: $ MOZ_DISABLE_GMP_SANDBOX=1 firefox-wayland or with export: $ export MOZ_DISABLE_GMP_SANDBOX=1 $ firefox-wayland See upstream bug for more details about the cause. We may backport a fix when it's available at https://bugzilla.mozilla.org/show_bug.cgi?id=1725828 *** Bug 2002833 has been marked as a duplicate of this bug. *** FEDORA-2021-056d3314d6 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-056d3314d6 FEDORA-2021-056d3314d6 has been pushed to the Fedora 35 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-056d3314d6` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-056d3314d6 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. *** Bug 1997224 has been marked as a duplicate of this bug. *** FEDORA-2021-056d3314d6 has been pushed to the Fedora 35 stable repository. If problem still persists, please make note of it in this bug report. |