Bug 449239
Summary: | Get SIGABRT trying to view google swf | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Tom London <selinux> |
Component: | swfdec-mozilla | Assignee: | Brian Pepple <bdpepple> |
Status: | CLOSED WONTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | 10 | CC: | dwalsh, gecko-bugs-nobody, lpoetter, mcepl, stransky, walters |
Target Milestone: | --- | Keywords: | SELinux, Triaged |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-12-18 06:10:57 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Tom London
2008-05-31 20:24:03 UTC
I also seem to get the following AVC when this happens: type=AVC msg=audit(1212265080.613:94): avc: denied { execstack } for pid=21302 comm="firefox" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process type=SYSCALL msg=audit(1212265080.613:94): arch=40000003 syscall=125 success=no exit=-13 a0=bfe7e000 a1=1000 a2=1000007 a3=fffff000 items=0 ppid=21288 pid=21302 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="firefox" exe="/usr/lib/firefox-3.0pre/firefox" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) type=ANOM_ABEND msg=audit(1212265080.617:95): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0 pid=21302 comm="firefox" sig=6 type=ANOM_ABEND msg=audit(1212265212.569:96): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0 pid=21414 comm="firefox" sig=11 I get this running in both permissive and enforcing modes. (So it still fails if I run with 'setenforce 0'). Versions of pulseaudio packages: pulseaudio-libs-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-esound-compat-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-utils-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-libs-zeroconf-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-module-x11-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-module-jack-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-module-bluetooth-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-module-gconf-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-debuginfo-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-libs-glib2-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-module-zeroconf-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-core-libs-0.9.11-0.3.svn20080529.fc10.i386 pulseaudio-module-lirc-0.9.11-0.3.svn20080529.fc10.i386 I added some missing '*-debuginfo' packages and reran (permissive mode): [tbl@localhost ~]$ firefox -g MOZILLA_FIVE_HOME=/usr/lib/firefox-3.0pre LD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/plugins:/usr/lib/firefox-3.0pre DISPLAY=:0.0 FONTCONFIG_PATH=/etc/fonts:/usr/lib/firefox-3.0pre/res/Xft DYLD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/components:/usr/lib/firefox-3.0pre SHLIB_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre LIBPATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre ADDON_PATH=/usr/lib/firefox-3.0pre MOZ_PROGRAM=/usr/lib/firefox-3.0pre/firefox MOZ_TOOLKIT= moz_debug=1 moz_debugger= which: no ddd in (/usr/kerberos/bin:/usr/local/bin:/usr/bin:/bin:/home/tbl/bin) /usr/bin/gdb /usr/lib/firefox-3.0pre/firefox -x /tmp/mozargs.UsdNO1 GNU gdb Fedora (6.8-9.fc10) Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"... (gdb) run Starting program: /usr/lib/firefox-3.0pre/firefox [Thread debugging using libthread_db enabled] [New Thread 0xb7f196d0 (LWP 22776)] (firefox:22776): GnomeUI-WARNING **: While connecting to session manager: Could not open network socket. [New Thread 0xb7d18b90 (LWP 22783)] [New Thread 0xb7317b90 (LWP 22784)] [New Thread 0xb6891b90 (LWP 22785)] [New Thread 0xb5e90b90 (LWP 22786)] [New Thread 0xb548fb90 (LWP 22787)] [Thread 0xb5e90b90 (LWP 22786) exited] [Thread 0xb548fb90 (LWP 22787) exited] [New Thread 0xb548fb90 (LWP 22788)] [New Thread 0xb5e90b90 (LWP 22789)] [New Thread 0xb3b58b90 (LWP 22790)] [New Thread 0xb3157b90 (LWP 22791)] [New Thread 0xb2756b90 (LWP 22792)] [New Thread 0xb1ce7b90 (LWP 22793)] [New Thread 0xb10ffb90 (LWP 22794)] [Thread 0xb2756b90 (LWP 22792) exited] [Thread 0xb1ce7b90 (LWP 22793) exited] [New Thread 0xb1ce7b90 (LWP 22803)] [Thread 0xb3b58b90 (LWP 22790) exited] [Thread 0xb10ffb90 (LWP 22794) exited] Detaching after fork from child process 22817. Unsupported movie property id with value "flash_object" Unsupported movie property style with value "position: absolute; top: 1px; left: 1px; height: 1px; width: 1px;" Unsupported movie property quality with value "high" Unsupported movie property pluginspage with value "http://www.macromedia.com/go/getflashplayer" unhandled event 19 Loading stream: https://mail.google.com/mail/im/sound.swf [Thread 0xb1ce7b90 (LWP 22803) exited] [Thread 0xb6891b90 (LWP 22785) exited] [New Thread 0xb6891b90 (LWP 22883)] [New Thread 0xb1ce7b90 (LWP 22884)] [Thread 0xb1ce7b90 (LWP 22884) exited] [New Thread 0xb1ce7b90 (LWP 22893)] [New Thread 0xb10ffb90 (LWP 22894)] [New Thread 0xb3b58b90 (LWP 22895)] [Thread 0xb10ffb90 (LWP 22894) exited] [Thread 0xb3b58b90 (LWP 22895) exited] unhandled event 19 Loading stream: http://www.youtube.com/swf/l.swf?video_id=fD-4FRTzxkI&rel=1&eurl=http%3A//googleblog.blogspot.com/2008/05/google-sites-now-open-to-everyone.html&iurl=http%3A//i.ytimg.com/vi/fD-4FRTzxkI/default.jpg&t=OEgsToPDskKX3tN_XQDxNP9YrteGh9sx Loading stream: http://www.youtube.com/swf/cps.swf SWFDEC: ERROR: swfdec_movie_as_drawing.c(255): swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible, resetting SWFDEC: ERROR: swfdec_movie_as_drawing.c(255): swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible, resetting [New Thread 0xb3b58b90 (LWP 22910)] Loading stream: http://i.ytimg.com/crossdomain.xml Loading stream: http://i.ytimg.com/vi/fD-4FRTzxkI/default.jpg [Thread 0xb3b58b90 (LWP 22910) exited] Loading stream: http://www.youtube.com/api2_rest?method=youtube.videos.track_embed_video&video_id=fD-4FRTzxkI Loading stream: http://74.125.12.81/get_video?video_id=fD-4FRTzxkI&origin=ash-v557.ash.youtube.com&signature=629C2488488BBD87FBCE4654456F1A58BA3AFD3E.6B38CB8C4B9E1E76849303456EC318075753BE7A&ip=71.198.1.10&ipbits=16&expire=1212288463&key=yt1&sver=2 [New Thread 0xb3b58b90 (LWP 22923)] Missing separate debuginfo for /home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so firefox: pcm_pulse.c:274: pulse_write: Assertion `pcm->last_size >= (size * pcm->frame_size)' failed. Program received signal SIGABRT, Aborted. 0x00110416 in __kernel_vsyscall () Missing separate debuginfos, use: debuginfo-install ORBit2.i386 acl.i386 attr.i386 audiofile.i386 avahi.i386 bzip2.i386 dbus-glib.i386 dbus.i386 e2fsprogs.i386 esound.i386 expat.i386 fontconfig.i386 freetype.i386 gamin.i386 gdbm.i386 gnome-keyring.i386 gnutls.i386 gvfs.i386 hunspell.i386 keyutils.i386 krb5.i386 lcms.i386 libICE.i386 libSM.i386 libX11.i386 libXScrnSaver.i386 libXau.i386 libXcomposite.i386 libXcursor.i386 libXdmcp.i386 libXext.i386 libXfixes.i386 libXft.i386 libXi.i386 libXinerama.i386 libXrandr.i386 libXrender.i386 libXt.i386 libart_lgpl.i386 libbonobo.i386 libbonoboui.i386 libcap.i386 libgcrypt.i386 libgnome.i386 libgnomecanvas.i386 libgnomeui.i386 libgpg-error.i386 libjpeg.i386 libselinux.i386 libsoup.i386 libtasn1.i386 libxcb.i386 libxml2.i386 nss-mdns.i386 openssl.i686 pixman.i386 popt.i386 zlib.i386 (gdb) where #0 0x00110416 in __kernel_vsyscall () #1 0x00a81610 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #2 0x00a82fd8 in abort () at abort.c:88 #3 0x00a7a52e in __assert_fail (assertion=<value optimized out>, file=<value optimized out>, line=<value optimized out>, function=<value optimized out>) at assert.c:78 #4 0x007fcba5 in pulse_write (io=0xe3275c8, areas=0xbfe2f220, offset=0, size=1024) at pcm_pulse.c:274 #5 0x04b9d151 in ioplug_priv_transfer_areas (pcm=<value optimized out>, areas=Could not find the frame base for "ioplug_priv_transfer_areas". ) at pcm_ioplug.c:536 #6 0x04b59c29 in snd1_pcm_write_areas (pcm=<value optimized out>, areas=<value optimized out>, offset=<value optimized out>, size=<value optimized out>, func=<value optimized out>) at pcm.c:6472 #7 0x04b9d555 in snd_pcm_ioplug_writei (pcm=<value optimized out>, buffer=<value optimized out>, size=<value optimized out>) at pcm_ioplug.c:551 #8 0x04b54684 in snd_pcm_writei (pcm=<value optimized out>, buffer=<value optimized out>, size=<value optimized out>) at pcm_local.h:511 #9 0x0067c60d in try_write_so_pa_gets_it (stream=<value optimized out>) at swfdec_playback.c:135 #10 0x0067c1b4 in swfdec_playback_stream_start (stream=<value optimized out>) ---Type <return> to continue, or q <return> to quit--- at swfdec_playback.c:214 #11 0x0067c3f4 in swfdec_playback_stream_open (sound=<value optimized out>, audio=<value optimized out>) at swfdec_playback.c:297 #12 0x00d5412a in IA__g_cclosure_marshal_VOID__OBJECT ( closure=<value optimized out>, return_value=Could not find the frame base for "IA__g_cclosure_marshal_VOID__OBJECT". ) at gmarshal.c:636 #13 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, return_value=<value optimized out>, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>) at gclosure.c:490 #14 0x00d5c867 in signal_emit_unlocked_R (node=<value optimized out>, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:2440 #15 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, signal_id=<value optimized out>, detail=<value optimized out>, var_args=<value optimized out>) at gsignal.c:2199 #16 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for "IA__g_signal_emit". ) at gsignal.c:2243 #17 0x006ec441 in swfdec_player_unlock_soft (player=<value optimized out>) at swfdec_player.c:1278 #18 0x006ec6fa in swfdec_player_unlock (player=<value optimized out>) at swfdec_player.c:1604 #19 0x006edb17 in swfdec_player_do_advance (player=<value optimized out>, msecs=<value optimized out>, audio_samples=<value optimized out>) ---Type <return> to continue, or q <return> to quit--- at swfdec_player.c:1475 #20 0x00722d53 in swfdec_marshal_VOID__ULONG_UINT ( closure=<value optimized out>, return_value=Could not find the frame base for "swfdec_marshal_VOID__ULONG_UINT". ) at swfdec_marshal.c:285 #21 0x00d448d9 in g_type_class_meta_marshal (closure=<value optimized out>, return_value=Could not find the frame base for "g_type_class_meta_marshal". ) at gclosure.c:567 #22 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, return_value=<value optimized out>, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>) at gclosure.c:490 #23 0x00d5c51f in signal_emit_unlocked_R (node=<value optimized out>, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:2478 #24 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, signal_id=<value optimized out>, detail=<value optimized out>, var_args=<value optimized out>) at gsignal.c:2199 #25 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for "IA__g_signal_emit". ) at gsignal.c:2243 #26 0x006ea5ba in swfdec_player_advance (player=<value optimized out>, msecs=<value optimized out>) at swfdec_player.c:2612 #27 0x0067cbe4 in swfdec_iterate_dispatch (source_=<value optimized out>, callback=Could not find the frame base for "swfdec_iterate_dispatch". ) at swfdec_source.c:109 #28 0x00c83f38 in IA__g_main_context_dispatch (context=<value optimized out>) at gmain.c:2063 ---Type <return> to continue, or q <return> to quit--- #29 0x00c8749b in g_main_context_iterate (context=<value optimized out>, block=<value optimized out>, dispatch=<value optimized out>, self=Could not find the frame base for "g_main_context_iterate". ) at gmain.c:2696 #30 0x00c87618 in IA__g_main_context_iteration (context=<value optimized out>, may_block=<value optimized out>) at gmain.c:2759 #31 0x05bae31c in nsAppShell::ProcessNextNativeEvent (this=Could not find the frame base for "nsAppShell::ProcessNextNativeEvent(int)". ) at nsAppShell.cpp:144 #32 0x05bc4c44 in nsBaseAppShell::DoProcessNextNativeEvent (this=Could not find the frame base for "nsBaseAppShell::DoProcessNextNativeEvent(int)". ) at nsBaseAppShell.cpp:151 #33 0x05bc4e4d in nsBaseAppShell::OnProcessNextEvent ( this=<value optimized out>, thr=<value optimized out>, mayWait=<value optimized out>, recursionDepth=Could not find the frame base for "nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned int)". ) at nsBaseAppShell.cpp:278 #34 0x05c82426 in nsThread::ProcessNextEvent (this=<value optimized out>, mayWait=<value optimized out>, result=<value optimized out>) at nsThread.cpp:497 #35 0x05c4f424 in NS_ProcessNextEvent_P (thread=<value optimized out>, mayWait=<value optimized out>) at nsThreadUtils.cpp:227 #36 0x05bc4f24 in nsBaseAppShell::Run (this=<value optimized out>) at nsBaseAppShell.cpp:170 #37 0x05a7b720 in nsAppStartup::Run (this=<value optimized out>) at nsAppStartup.cpp:181 #38 0x0544ea11 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) ---Type <return> to continue, or q <return> to quit--- at nsAppRunner.cpp:3170 #39 0x08049169 in main (argc=1, argv=0xbfe34924) at nsXULStub.cpp:364 (gdb) quit The program is running. Exit anyway? (y or n) y [tbl@localhost ~]$ a) run the line suggested by gdb (use: debuginfo-install <long list of package>), to get complete backtraces. b) this is however complete enough to blame swfdec instead ;-) (In reply to comment #4) > a) run the line suggested by gdb (use: debuginfo-install <long list of > package>), to get complete backtraces. > b) this is however complete enough to blame swfdec instead ;-) Thanks. For completeness, I ran the 'debuginfo-install' as suggested in a), and regerated the backtrace: [tbl@localhost ~]$ firefox -g MOZILLA_FIVE_HOME=/usr/lib/firefox-3.0pre LD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/plugins:/usr/lib/firefox-3.0pre DISPLAY=:0.0 FONTCONFIG_PATH=/etc/fonts:/usr/lib/firefox-3.0pre/res/Xft DYLD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/components:/usr/lib/firefox-3.0pre SHLIB_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre LIBPATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre ADDON_PATH=/usr/lib/firefox-3.0pre MOZ_PROGRAM=/usr/lib/firefox-3.0pre/firefox MOZ_TOOLKIT= moz_debug=1 moz_debugger= which: no ddd in (/usr/kerberos/bin:/usr/local/bin:/usr/bin:/bin:/home/tbl/bin) /usr/bin/gdb /usr/lib/firefox-3.0pre/firefox -x /tmp/mozargs.I1ZoTJ GNU gdb Fedora (6.8-10.fc10) Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"... (gdb) run Starting program: /usr/lib/firefox-3.0pre/firefox [Thread debugging using libthread_db enabled] [New Thread 0xb7f2c6d0 (LWP 5850)] (firefox:5850): GnomeUI-WARNING **: While connecting to session manager: Could not open network socket. [New Thread 0xb7d2bb90 (LWP 5861)] [New Thread 0xb732ab90 (LWP 5862)] [New Thread 0xb68a4b90 (LWP 5863)] [New Thread 0xb5ea3b90 (LWP 5864)] [New Thread 0xb54a2b90 (LWP 5865)] [Thread 0xb5ea3b90 (LWP 5864) exited] [Thread 0xb54a2b90 (LWP 5865) exited] [New Thread 0xb54a2b90 (LWP 5866)] [New Thread 0xb5ea3b90 (LWP 5867)] [New Thread 0xb48beb90 (LWP 5868)] [Thread 0xb48beb90 (LWP 5868) exited] [New Thread 0xb48beb90 (LWP 5869)] [New Thread 0xb305bb90 (LWP 5870)] [New Thread 0xb2640b90 (LWP 5871)] [Thread 0xb2640b90 (LWP 5871) exited] [New Thread 0xb2640b90 (LWP 5872)] [New Thread 0xb17fcb90 (LWP 5877)] [New Thread 0xb0dfbb90 (LWP 5878)] [New Thread 0xb03fab90 (LWP 5879)] [Thread 0xb17fcb90 (LWP 5877) exited] [Thread 0xb0dfbb90 (LWP 5878) exited] [Thread 0xb03fab90 (LWP 5879) exited] [Thread 0xb48beb90 (LWP 5869) exited] [New Thread 0xb48beb90 (LWP 5930)] [New Thread 0xb03fab90 (LWP 5931)] [New Thread 0xb0dfbb90 (LWP 5932)] [Thread 0xb2640b90 (LWP 5872) exited] [Thread 0xb48beb90 (LWP 5930) exited] [Thread 0xb0dfbb90 (LWP 5932) exited] [Thread 0xb03fab90 (LWP 5931) exited] [Thread 0xb68a4b90 (LWP 5863) exited] [New Thread 0xb68a4b90 (LWP 5988)] [New Thread 0xb03fab90 (LWP 5997)] Detaching after fork from child process 6002. unhandled event 19 Loading stream: http://www.youtube.com/swf/l.swf?video_id=fD-4FRTzxkI&rel=1&eurl=http%3A//googleblog.blogspot.com/2008/05/google-sites-now-open-to-everyone.html&iurl=http%3A//i.ytimg.com/vi/fD-4FRTzxkI/default.jpg&t=OEgsToPDskK0PQX4C7Zp4EOUkwZbQUM8 Loading stream: http://www.youtube.com/swf/cps.swf SWFDEC: ERROR: swfdec_movie_as_drawing.c(255): swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible, resetting SWFDEC: ERROR: swfdec_movie_as_drawing.c(255): swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible, resetting Loading stream: http://i.ytimg.com/crossdomain.xml Loading stream: http://i.ytimg.com/vi/fD-4FRTzxkI/default.jpg Loading stream: http://www.youtube.com/api2_rest?method=youtube.videos.track_embed_video&video_id=fD-4FRTzxkI Loading stream: http://cache.googlevideo.com/get_video?video_id=fD-4FRTzxkI&origin=ash-v557.ash.youtube.com&signature=6514E1C81A222516A69B272CD13B2628A0C46B0C.9497A9D3CD8E6D7A28EA9156EB68AEEE0031AB14&ip=24.130.149.10&ipbits=16&expire=1212437156&key=yt1&sver=2 [New Thread 0xb0dfbb90 (LWP 6024)] Missing separate debuginfo for /home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so firefox: pcm_pulse.c:274: pulse_write: Assertion `pcm->last_size >= (size * pcm->frame_size)' failed. Program received signal SIGABRT, Aborted. 0x00110416 in __kernel_vsyscall () Missing separate debuginfos, use: debuginfo-install keyutils.i386 (gdb) where #0 0x00110416 in __kernel_vsyscall () #1 0x00a81610 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #2 0x00a82fd8 in abort () at abort.c:88 #3 0x00a7a52e in __assert_fail (assertion=<value optimized out>, file=<value optimized out>, line=<value optimized out>, function=<value optimized out>) at assert.c:78 #4 0x007f7ba5 in pulse_write (io=0xa7bd630, areas=0xbfc42040, offset=0, size=1024) at pcm_pulse.c:274 #5 0x04b9d151 in ioplug_priv_transfer_areas (pcm=<value optimized out>, areas=Could not find the frame base for "ioplug_priv_transfer_areas". ) at pcm_ioplug.c:536 #6 0x04b59c29 in snd1_pcm_write_areas (pcm=<value optimized out>, areas=<value optimized out>, offset=<value optimized out>, size=<value optimized out>, func=<value optimized out>) at pcm.c:6472 #7 0x04b9d555 in snd_pcm_ioplug_writei (pcm=<value optimized out>, buffer=<value optimized out>, size=<value optimized out>) at pcm_ioplug.c:551 #8 0x04b54684 in snd_pcm_writei (pcm=<value optimized out>, buffer=<value optimized out>, size=<value optimized out>) at pcm_local.h:511 #9 0x0068860d in try_write_so_pa_gets_it (stream=<value optimized out>) at swfdec_playback.c:135 #10 0x006881b4 in swfdec_playback_stream_start (stream=<value optimized out>) ---Type <return> to continue, or q <return> to quit--- at swfdec_playback.c:214 #11 0x006883f4 in swfdec_playback_stream_open (sound=<value optimized out>, audio=<value optimized out>) at swfdec_playback.c:297 #12 0x00d5412a in IA__g_cclosure_marshal_VOID__OBJECT ( closure=<value optimized out>, return_value=Could not find the frame base for "IA__g_cclosure_marshal_VOID__OBJECT". ) at gmarshal.c:636 #13 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, return_value=<value optimized out>, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>) at gclosure.c:490 #14 0x00d5c867 in signal_emit_unlocked_R (node=<value optimized out>, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:2440 #15 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, signal_id=<value optimized out>, detail=<value optimized out>, var_args=<value optimized out>) at gsignal.c:2199 #16 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for "IA__g_signal_emit". ) at gsignal.c:2243 #17 0x006f8441 in swfdec_player_unlock_soft (player=<value optimized out>) at swfdec_player.c:1278 #18 0x006f86fa in swfdec_player_unlock (player=<value optimized out>) at swfdec_player.c:1604 #19 0x006f9b17 in swfdec_player_do_advance (player=<value optimized out>, msecs=<value optimized out>, audio_samples=<value optimized out>) ---Type <return> to continue, or q <return> to quit--- at swfdec_player.c:1475 #20 0x0072ed53 in swfdec_marshal_VOID__ULONG_UINT ( closure=<value optimized out>, return_value=Could not find the frame base for "swfdec_marshal_VOID__ULONG_UINT". ) at swfdec_marshal.c:285 #21 0x00d448d9 in g_type_class_meta_marshal (closure=<value optimized out>, return_value=Could not find the frame base for "g_type_class_meta_marshal". ) at gclosure.c:567 #22 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, return_value=<value optimized out>, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>) at gclosure.c:490 #23 0x00d5c51f in signal_emit_unlocked_R (node=<value optimized out>, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:2478 #24 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, signal_id=<value optimized out>, detail=<value optimized out>, var_args=<value optimized out>) at gsignal.c:2199 #25 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for "IA__g_signal_emit". ) at gsignal.c:2243 #26 0x006f65ba in swfdec_player_advance (player=<value optimized out>, msecs=<value optimized out>) at swfdec_player.c:2612 #27 0x00688be4 in swfdec_iterate_dispatch (source_=<value optimized out>, callback=Could not find the frame base for "swfdec_iterate_dispatch". ) at swfdec_source.c:109 #28 0x00c83f38 in IA__g_main_context_dispatch (context=<value optimized out>) at gmain.c:2063 ---Type <return> to continue, or q <return> to quit--- #29 0x00c8749b in g_main_context_iterate (context=<value optimized out>, block=<value optimized out>, dispatch=<value optimized out>, self=Could not find the frame base for "g_main_context_iterate". ) at gmain.c:2696 #30 0x00c87618 in IA__g_main_context_iteration (context=<value optimized out>, may_block=<value optimized out>) at gmain.c:2759 #31 0x05bae31c in nsAppShell::ProcessNextNativeEvent (this=Could not find the frame base for "nsAppShell::ProcessNextNativeEvent(int)". ) at nsAppShell.cpp:144 #32 0x05bc4c44 in nsBaseAppShell::DoProcessNextNativeEvent (this=Could not find the frame base for "nsBaseAppShell::DoProcessNextNativeEvent(int)". ) at nsBaseAppShell.cpp:151 #33 0x05bc4e4d in nsBaseAppShell::OnProcessNextEvent ( this=<value optimized out>, thr=<value optimized out>, mayWait=<value optimized out>, recursionDepth=Could not find the frame base for "nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned int)". ) at nsBaseAppShell.cpp:278 #34 0x05c82426 in nsThread::ProcessNextEvent (this=<value optimized out>, mayWait=<value optimized out>, result=<value optimized out>) at nsThread.cpp:497 #35 0x05c4f424 in NS_ProcessNextEvent_P (thread=<value optimized out>, mayWait=<value optimized out>) at nsThreadUtils.cpp:227 #36 0x05bc4f24 in nsBaseAppShell::Run (this=<value optimized out>) at nsBaseAppShell.cpp:170 #37 0x05a7b720 in nsAppStartup::Run (this=<value optimized out>) at nsAppStartup.cpp:181 #38 0x0544ea11 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) ---Type <return> to continue, or q <return> to quit--- at nsAppRunner.cpp:3170 #39 0x08049169 in main (argc=1, argv=0xbfc47744) at nsXULStub.cpp:364 (gdb) quit The program is running. Exit anyway? (y or n) y [tbl@localhost ~]$ I continue to get the above crashes/traces on .swf objects, e.g. youtube. Is there more debugging info I can provide to help? BTW, this does NOT abort if I kill the pulseaudio daemon. Lennart, any ideas? I now also see this when trying to view the swf's on http://nytimes.com: Loading stream: http://graphics8.nytimes.com/feedroom/nytc3/creative/nytc_front.swf SWFDEC: ERROR: swfdec_net_connection.c(107): swfdec_net_connection_connect: FIXME: using NetConnection with non-null URLs is not implemented Loading stream: http://oas-fr.video.on.nytimes.com/RealMedia/ads/adstream_sx.ads/nytd.com/front/homepage/40037@x16 SWFDEC: ERROR: swfdec_net_connection.c(107): swfdec_net_connection_connect: FIXME: using NetConnection with non-null URLs is not implemented [Thread 0xb27feb90 (LWP 4775) exited] Here is another: Loading stream: http://graphics8.nytimes.com/feedroom/nytc3/creative/nytc_front.swf Loading stream: http://oas-fr.video.on.nytimes.com/RealMedia/ads/adstream_sx.ads/nytd.com/front/homepage/6537@x16 SWFDEC: ERROR: swfdec_net_connection.c(107): swfdec_net_connection_connect: FIXME: using NetConnection with non-null URLs is not implemented Stream does not play. Are you able to reproduce this bug with the http://googleblog.blogspot.com/2008/05/google-sites-now-open-to-everyone.html after upgrading to the latest versions of F9 packages. It just works for me now. I'm on rawhide. swfdec/flash fails badly for me: [tbl@localhost plugins]$ firefox unhandled event 19 Loading stream: http://s.ytimg.com/yt/swf/watch-vfl47060.swf Loading stream: http://youtube.com/version-check.swf Loading stream: http://youtube.com/crossdomain.xml Loading stream: http://v5.cache.googlevideo.com/get_video?video_id=1tBeqxKKseA&origin=lax-v19.lax.youtube.com&signature=9755EEEA976018517A5FE547C4AF8A579CB5E9AB.D28B193F4FB4D1CC992FED09DC4DC6C6C4CAF426&ip=24.130.149.10&ipbits=16&expire=1216846951&key=yt1&sver=2 firefox: pcm_pulse.c:274: pulse_write: Assertion `pcm->last_size >= (size * pcm->frame_size)' failed. /usr/lib/firefox-3.0/run-mozilla.sh: line 131: 21137 Aborted "$prog" ${1+"$@"} [tbl@localhost plugins]$ This is with a fresh install of Rebuilding rpms from deltarpms (1/4): swfdec-mozilla-0.7.2-1.fc10.i386.rpm | 40 kB 00:00 (2/4): swfdec-gtk-0.7.2-1.fc10.i386.rpm | 42 kB 00:00 (3/4): swfdec-mozilla-debuginfo-0.7.2-1.fc10.i386.rpm | 148 kB 00:00 (4/4): swfdec-0.7.2-1.fc10.i386.rpm | 419 kB 00:00 Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Test Succeeded Running Transaction Installing : swfdec-mozilla-debuginfo [1/4] Installing : swfdec [2/4] Installing : swfdec-gtk [3/4] Installing : swfdec-mozilla [4/4] Installed: swfdec-mozilla.i386 0:0.7.2-1.fc10 swfdec-mozilla-debuginfo.i386 0:0.7.2-1.fc10 Dependency Installed: swfdec.i386 0:0.7.2-1.fc10 swfdec-gtk.i386 0:0.7.2-1.fc10 Complete! [root@localhost ~]# Works fine if I remove all swfdec packages and install Adobe flash-plugin. In addition to the above crash, I get an earlier SELinux AVC if I run in enforcing mode: (firefox:21045): GStreamer-WARNING **: Failed to load plugin '/home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so': /home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so: cannot enable executable stack as shared object requires: Permission denied SWFDEC: ERROR: swfdec_codec_gst.c(211): swfdec_gst_decoder_init: failed to create decoder SWFDEC: ERROR: swfdec_audio_decoder.c(199): swfdec_audio_decoder_errorv: error decoding audio: no suitable decoder for audio codec 2 Rhythmbox has no issues with this plugin.... OK, concerning AVC denials -- I think touch /.autorelabel reboot could help a little. Also, you can just wipe up ~/.gstreamer-0.10/ (it will be regenerated automagically) and check whether it wouldn't help. And also the output of the command rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin* would be helpful. Thanks in advance. [tbl@localhost ~]$ rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin* firefox-debuginfo-3.0.1-1.fc10.i386 flash-plugin-9.0.124.0-release.i386 xulrunner-1.9.0.1-2.fc10.i386 xulrunner-debuginfo-1.9.0.1-2.fc10.i386 xulrunner-devel-1.9.0.1-2.fc10.i386 firefox-3.0.1-1.fc10.i386 [tbl@localhost ~]$ But the above is after an update, not the packages I had installed for #11. In general, I'm running latest rawhide. Regarding AVC, here is the raw message: type=AVC msg=audit(1216825352.350:74): avc: denied { execmem } for pid=21137 comm="firefox" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process type=SYSCALL msg=audit(1216825352.350:74): arch=40000003 syscall=125 success=yes exit=0 a0=bfdc7000 a1=1000 a2=1000007 a3=fffff000 items=0 ppid=21123 pid=21137 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 ses=1 comm="firefox" exe="/usr/lib/firefox-3.0/firefox" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) [tbl@localhost .gstreamer-0.10]$ ls -lZ plugins -rwxrwxr-x tbl tbl system_u:object_r:textrel_shlib_t libgstffmpeg.so -rwxr-xr-x tbl tbl unconfined_u:object_r:textrel_shlib_t libgstflump3dec.so -rwxr-xr-x tbl tbl unconfined_u:object_r:textrel_shlib_t libgstflump3dec.so.old -rw-r--r-- tbl tbl system_u:object_r:user_home_t libgstflumpegdemux.a -rwxr-xr-x tbl tbl system_u:object_r:user_home_t libgstflumpegdemux.la -rwxr-xr-x tbl tbl system_u:object_r:textrel_shlib_t libgstflumpegdemux.so [tbl@localhost .gstreamer-0.10]$ so, the fluendo codec is already marked 'textrel_shlib_t', but .... Believe this is usually caused by some issue with the app, not the label. Regarding 'wiping up' ~/.gstreamer-0.10/, I'm guessing you mean the registry files, not the plugin directory, right? BTW, [tbl@localhost .gstreamer-0.10]$ ls -l total 1288 drwxr-xr-x 2 tbl tbl 4096 2008-06-26 13:50 plugins -rw------- 1 tbl tbl 299584 2008-07-25 06:57 registry.i386.bin -rw------- 1 tbl tbl 539740 2008-06-18 06:55 registry.i386.xml -rw------- 1 tbl tbl 439747 2007-05-30 17:41 registry.i686.xml [tbl@localhost .gstreamer-0.10]$ Normal to have both i386 and i686 registry.xml files? (In reply to comment #13) > [tbl@localhost ~]$ rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin* > firefox-debuginfo-3.0.1-1.fc10.i386 > flash-plugin-9.0.124.0-release.i386 > xulrunner-1.9.0.1-2.fc10.i386 > xulrunner-debuginfo-1.9.0.1-2.fc10.i386 > xulrunner-devel-1.9.0.1-2.fc10.i386 > firefox-3.0.1-1.fc10.i386 > [tbl@localhost ~]$ You are missing nspluginwrapper -- your AVC denials are probably caused by this -- remember since F9 we have SELinux confined nspluginwrapper (which is a good thing!). Install nspluginwrapper package and run mozilla-plugin-config -f -c. DOes it help? > Believe this is usually caused by some issue with the app, not the label. 90% of all SELinux issues are caused by labels. But see above about nspluginwrapper. > Regarding 'wiping up' ~/.gstreamer-0.10/, I'm guessing you mean the registry > files, not the plugin directory, right? Yeah, for me it is the same, I don't have any plugins ~/ (and now I wonder how much supported plugins in ~/.gstreamer*/ actually are). (In reply to comment #14) > BTW, > > [tbl@localhost .gstreamer-0.10]$ ls -l > total 1288 > drwxr-xr-x 2 tbl tbl 4096 2008-06-26 13:50 plugins > -rw------- 1 tbl tbl 299584 2008-07-25 06:57 registry.i386.bin > -rw------- 1 tbl tbl 539740 2008-06-18 06:55 registry.i386.xml > -rw------- 1 tbl tbl 439747 2007-05-30 17:41 registry.i686.xml > [tbl@localhost .gstreamer-0.10]$ > > > Normal to have both i386 and i686 registry.xml files? Yeah, that was another reason why I asked to wipe up this folder -- I suspect some old goo staying there. Removing these registry files should be absolutely harmless. So, what's the situation now? OK. I cleared out the .bin and the .xml files from ~/.gstr* I installed nspluginwrapper, and then ran mozilla-plugin-config. Here is what I got: [tbl@localhost .gstreamer-0.10]$ mozilla-plugin-config -f -c *** NSPlugin Viewer *** ERROR: /usr/lib/mozilla/plugins/librhythmbox-itms-detection-plugin.so: undefined symbol: __gxx_personality_v0 [tbl@localhost .gstreamer-0.10]$ Safe to proceed? I reinstalled the swfec* packages, restarted firefox, browsed to youtube. Running in SELinux enforcing mode, I get video now, but no audio. Here is the AVC: type=AVC msg=audit(1217002882.566:29): avc: denied { write } for pid=3918 comm="npviewer.bin" name="native" dev=dm-0 ino=1703940 scontext=unconfined_u:unconfined_r:nsplugin_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=sock_file type=SYSCALL msg=audit(1217002882.566:29): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfa724f0 a2=327830 a3=0 items=0 ppid=3745 pid=3918 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0 key=(null) The write to the pulse socket (~/.pulse/native) is failing. If I put system in permissive mode, worse, I get an abort: [tbl@localhost .pulse]$ firefox unhandled event 19 *** NSPlugin Wrapper *** WARNING: unhandled variable 11 in NPP_GetValue() *** NSPlugin Wrapper *** WARNING: unhandled variable 11 in NPP_GetValue() Loading stream: http://www.youtube.com/version-check.swf ** (npviewer.bin:4765): CRITICAL **: swfmoz_player_render: assertion `!gdk_region_empty (region)' failed Loading stream: http://s.ytimg.com/yt/swf/watch-vfl48341.swf Loading stream: http://www.youtube.com/crossdomain.xml Loading stream: http://v8.cache.googlevideo.com/get_video?video_id=A0qm8nq8RcA&origin=chi-v242.chi.youtube.com&signature=D7D8822DED076A559DFF3BA478B32A2FA2962559.42289726664E32A3100704BEF4EF315C6237EA25&ip=204.2.135.5&ipbits=16&expire=1217024531&key=yt1&sver=2 npviewer.bin: pcm_pulse.c:296: pulse_write: Assertion `pcm->last_size >= (size * pcm->frame_size)' failed. *** NSPlugin Wrapper *** ERROR: NPP_WriteReady() invoke: Connection reset by peer *** NSPlugin Wrapper *** ERROR: NPP_Write() invoke: Connection closed *** NSPlugin Wrapper *** ERROR: NPP_DestroyStream() invoke: Connection closed (firefox:4721): GLib-CRITICAL **: g_hash_table_remove_internal: assertion `hash_table != NULL' failed *** NSPlugin Wrapper *** ERROR: NPP_URLNotify() invoke: Connection closed Did you get any additional avc messages when you put it in permissive mode? Nope. Here is a snippet from /var/log/audit/audit.log (now actually audit.log.1) showing the "setenforce 0" followed by the crash. type=USER_AVC msg=audit(1217018107.831:36): user pid=2429 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' type=SYSCALL msg=audit(1217018107.828:35): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfcaa3f4 a2=1 a3=bfcaa3f4 items=0 ppid=4100 pid=4392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) type=AVC msg=audit(1217018206.506:37): avc: denied { write } for pid=4523 comm="npviewer.bin" name="native" dev=dm-0 ino=5111827 scontext=unconfined_u:unconfined_r:nsplugin_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=sock_file type=SYSCALL msg=audit(1217018206.506:37): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bff75a50 a2=3dd690 a3=0 items=0 ppid=4464 pid=4523 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 ses=2 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0 key=(null) type=ANOM_ABEND msg=audit(1217018206.616:38): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:nsplugin_t:s0 pid=4523 comm="npviewer.bin" sig=6 This bug appears to have been reported against 'rawhide' during the Fedora 10 development cycle. Changing version to '10'. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping This message is a reminder that Fedora 10 is nearing its end of life. Approximately 30 (thirty) days from now Fedora will stop maintaining and issuing updates for Fedora 10. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as WONTFIX if it remains open with a Fedora 'version' of '10'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version prior to Fedora 10's end of life. Bug Reporter: Thank you for reporting this issue and we are sorry that we may not be able to fix it before Fedora 10 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora please change the 'version' of this bug to the applicable version. If you are unable to change the version, please add a comment here and someone will do it for you. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. The process we are following is described here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping Fedora 10 changed to end-of-life (EOL) status on 2009-12-17. Fedora 10 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. Thank you for reporting this bug and we are sorry it could not be fixed. |