Bug 1945720 - IceCat (78.*.0) crashes when try to play HTML videos
Summary: IceCat (78.*.0) crashes when try to play HTML videos
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: icecat
Version: rawhide
Hardware: All
OS: Unspecified
unspecified
medium
Target Milestone: ---
Assignee: Antonio T. sagitter
QA Contact: Fedora Extras Quality Assurance
URL: https://lists.gnu.org/archive/html/gn...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-04-01 18:05 UTC by Antonio T. sagitter
Modified: 2021-05-04 01:17 UTC (History)
5 users (show)

Fixed In Version: icecat-78.10.0-2.rh1.fc34 icecat-78.10.0-2.rh1.fc33
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-05-03 02:05:26 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Log from MOZ_SANDBOX_LOGGING=1 (182.21 KB, text/plain)
2021-04-01 18:16 UTC, Antonio T. sagitter
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Mageia 28652 0 None None None 2021-04-11 14:57:51 UTC
Mozilla Foundation 1680166 0 -- RESOLVED Sandbox crashes when building with rustc >= 1.48 2021-04-24 18:23:25 UTC
Mozilla Foundation 1704374 0 -- UNCONFIRMED Tab crash when using video on Firefox ESR 78.9.0 on Mageia x86_64 2021-04-11 16:20:46 UTC

Description Antonio T. sagitter 2021-04-01 18:05:22 UTC
Description of problem:
IceCat crashes (tab crash) when try to play HTML videos.

Version-Release number of selected component (if applicable):
icecat-78.9.0

How reproducible:
Try to play test video like https://tekeye.uk/html/html5-video-test-page

Actual results:

dmesg:

[  330.877415] show_signal_msg: 112 callbacks suppressed
[  330.877417] MediaDe~hine #1[3376]: segfault at 0 ip 00007fe5bfda784d sp 00007fe58d7fc440 error 4 in libmozsandbox.so[7fe5bfd9c000+17000]
[  330.877423] Code: 24 98 01 00 00 31 c0 4c 8b 47 20 48 8b 47 28 83 fe 9c 0f 84 c5 00 00 00 f6 c4 10 0f 85 8c 00 00 00 4d 85 d2 0f 84 bc 00 00 00 <41> 80 3b 2f 0f 85 c1 00 00 00 89 c2 81 e2 ff f6 ff ff 0f 85 2a 01


journalctl:

apr 01 18:52:15 localhost.localdomain systemd-coredump[3390]: Process 3289 (Web Content) of user 1000 dumped core.
                                                              
                                                              Stack trace of thread 3376:
                                                              #0  0x00007fe5bfda784d _ZN7mozilla19SandboxPolicyCommon10StatAtTrapERKN7sandbox17arch_seccomp_dataEPv (libmozsandbox.so + 0xf84d)
                                                              #1  0x00007fe5bfd9db4f _ZN7sandbox4Trap6SigSysEiP9siginfo_tP10ucontext_t (libmozsandbox.so + 0x5b4f)
                                                              #2  0x00007fe5bfda653e _ZN7mozillaL13SigSysHandlerEiP9siginfo_tPv (libmozsandbox.so + 0xe53e)
                                                              #3  0x00007fe5bfd681e0 __restore_rt (libpthread.so.0 + 0x141e0)
                                                              #4  0x00007fe5bf928cdf __fxstatat64 (libc.so.6 + 0xf1cdf)
                                                              #5  0x00007fe5bf92891f statx_generic.constprop.0 (libc.so.6 + 0xf191f)
                                                              #6  0x00007fe5baee2471 _ZN3std3sys4unix2fs9try_statx17h270a8d5a518a3d7fE (libxul.so + 0x48a4471)
                                                              #7  0x00007fe5bad83d35 _ZN6memmap11MmapOptions7map_mut17hecb1a07ffaa354e1E (libxul.so + 0x4745d35)
                                                              #8  0x00007fe5baafde39 _ZN13cubeb_backend4capi16capi_stream_init17h3352695240f54a13E (libxul.so + 0x44bfe39)
                                                              #9  0x00007fe5b9b0e0ea cubeb_stream_init (libxul.so + 0x34d00ea)
                                                              #10 0x00007fe5b8b7b2c8 _ZN7mozilla11AudioStream9OpenCubebEP5cubebR19cubeb_stream_paramsNS_9TimeStampEb (libxul.so + 0x253d2c8)
                                                              #11 0x00007fe5b8b80daf _ZN7mozilla11AudioStream4InitEjjjP15AudioDeviceInfo (libxul.so + 0x2542daf)
                                                              #12 0x00007fe5b8d3858f _ZN7mozilla9AudioSink21InitializeAudioStreamERKNS0_14PlaybackParamsE (libxul.so + 0x26fa58f)
                                                              #13 0x00007fe5b8d38998 _ZN7mozilla9AudioSink4InitERKNS0_14PlaybackParamsER6RefPtrINS_10MozPromiseIb8nsresultLb0EEEE (libxul.so + 0x26fa998)
                                                              #14 0x00007fe5b8d39419 _ZN7mozilla16AudioSinkWrapper5StartERKNS_5media8TimeUnitERKNS_9MediaInfoE (libxul.so + 0x26fb419)
                                                              #15 0x00007fe5b8d3702b _ZN7mozilla9VideoSink5StartERKNS_5media8TimeUnitERKNS_9MediaInfoE (libxul.so + 0x26f902b)
                                                              #16 0x00007fe5b8bf841b _ZN7mozilla24MediaDecoderStateMachine14StartMediaSinkEv (libxul.so + 0x25ba41b)
                                                              #17 0x00007fe5b8c02063 _ZN7mozilla24MediaDecoderStateMachine18MaybeStartPlaybackEv (libxul.so + 0x25c4063)
                                                              #18 0x00007fe5b8c1ad80 _ZN7mozilla24MediaDecoderStateMachine13DecodingState4StepEv (libxul.so + 0x25dcd80)
                                                              #19 0x00007fe5b8be15b0 _ZN7mozilla24MediaDecoderStateMachine15RunStateMachineEv (libxul.so + 0x25a35b0)
                                                              #20 0x00007fe5b8bd821b _ZN7mozilla6detail18RunnableMethodImplIPNS_24MediaDecoderStateMachineEMS2_FvvELb1ELNS_12RunnableKindE0EJEE3RunEv (libxul.so +>
                                                              #21 0x00007fe5b7044356 _ZN7mozilla18AutoTaskDispatcher17TaskGroupRunnable3RunEv (libxul.so + 0xa06356)
                                                              #22 0x00007fe5b7049069 _ZN7mozilla9TaskQueue6Runner3RunEv (libxul.so + 0xa0b069)
                                                              #23 0x00007fe5b7055607 _ZN12nsThreadPool3RunEv (libxul.so + 0xa17607)
                                                              #24 0x00007fe5b7055d8b _ZN8nsThread16ProcessNextEventEbPb (libxul.so + 0xa17d8b)
                                                              #25 0x00007fe5b705387c _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so + 0xa1587c)
                                                              #26 0x00007fe5b740a13a _ZN7mozilla3ipc28MessagePumpForNonMainThreads3RunEPN4base11MessagePump8DelegateE (libxul.so + 0xdcc13a)
                                                              #27 0x00007fe5b73d6679 _ZN11MessageLoop3RunEv (libxul.so + 0xd98679)
                                                              #28 0x00007fe5b705f50a _ZN8nsThread10ThreadFuncEPv (libxul.so + 0xa2150a)
                                                              #29 0x00007fe5bf814a44 _pt_root (libnspr4.so + 0x2ca44)
                                                              #30 0x00007fe5bfd5d3f9 start_thread (libpthread.so.0 + 0x93f9)
                                                              #31 0x00007fe5bf938b53 __clone (libc.so.6 + 0x101b53)
                                                              
                                                              Stack trace of thread 3294:
                                                              #0  0x00007fe5bf92da5f __poll (libc.so.6 + 0xf6a5f)
                                                              #1  0x00007fe5bf815646 _pr_poll_with_poll (libnspr4.so + 0x2d646)
                                                              #2  0x00007fe5b714466c _ZN7mozilla3net24nsSocketTransportService4PollEPNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEEj (libxul.so + 0xb06>
                                                              #3  0x00007fe5b714be16 _ZN7mozilla3net24nsSocketTransportService15DoPollIterationEPNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libxul>
                                                              #4  0x00007fe5b714c0d8 _ZN7mozilla3net24nsSocketTransportService3RunEv (libxul.so + 0xb0e0d8)
                                                              #5  0x00007fe5b7055d8b _ZN8nsThread16ProcessNextEventEbPb (libxul.so + 0xa17d8b)
                                                              #6  0x00007fe5b705387c _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so + 0xa1587c)
                                                              #7  0x00007fe5b740a13a _ZN7mozilla3ipc28MessagePumpForNonMainThreads3RunEPN4base11MessagePump8DelegateE (libxul.so + 0xdcc13a)
                                                              #8  0x00007fe5b73d6679 _ZN11MessageLoop3RunEv (libxul.so + 0xd98679)
                                                              #9  0x00007fe5b705f50a _ZN8nsThread10ThreadFuncEPv (libxul.so + 0xa2150a)
                                                              #10 0x00007fe5bf814a44 _pt_root (libnspr4.so + 0x2ca44)
                                                              #11 0x00007fe5bfd5d3f9 start_thread (libpthread.so.0 + 0x93f9)
                                                              #12 0x00007fe5bf938b53 __clone (libc.so.6 + 0x101b53)


Expected results:
No error.

Additional info:

Workaround:

Set EV MOZ_DISABLE_CONTENT_SANDBOX and run 'icecat' by terminal:

$ export MOZ_DISABLE_CONTENT_SANDBOX=1
$ icecat-x11
or
$ icecat-wayland

Comment 1 Antonio T. sagitter 2021-04-01 18:16:49 UTC
Created attachment 1768329 [details]
Log from MOZ_SANDBOX_LOGGING=1

Log from MOZ_SANDBOX_LOGGING=1

Comment 2 Antonio T. sagitter 2021-04-01 18:18:01 UTC
Sandbox: Failed errno -2 op access flags 00 path /usr/share/gtk-3.0/settings.ini
Sandbox: Failed errno -2 op access flags 00 path /etc/gtk-3.0/settings.ini
Sandbox: Failed errno -2 op access flags 00 path /etc/gtk-3.0/settings.ini
Sandbox: Failed errno -2 op access flags 00 path /etc/xdg/gtk-3.0/settings.ini
Sandbox: Failed errno -2 op access flags 00 path /usr/share/gtk-3.0/settings.ini
Sandbox: Failed errno -2 op access flags 00 path /home/sagitter/.config/gtk-3.0/settings.ini
Sandbox: Failed errno -2 op stat flags 00 path /home/sagitter/.config/gtk-3.0/gtk.css
Sandbox: Failed errno -2 op open flags 00 path /usr/share/locale/en_US.UTF-8/LC_MESSAGES/glib20.mo
Sandbox: Failed errno -2 op open flags 00 path /usr/share/locale/en_US.utf8/LC_MESSAGES/glib20.mo
Sandbox: Failed errno -2 op open flags 00 path /usr/share/locale/en_US/LC_MESSAGES/glib20.mo
Sandbox: Failed errno -2 op open flags 00 path /usr/share/locale/en.UTF-8/LC_MESSAGES/glib20.mo
Sandbox: Failed errno -2 op open flags 00 path /usr/share/locale/en.utf8/LC_MESSAGES/glib20.mo
Sandbox: Failed errno -2 op open flags 00 path /usr/share/locale/en/LC_MESSAGES/glib20.mo
Sandbox: SandboxBroker: denied op=access rflags=0 perms=0 path=/.flatpak-info for pid=9149
Sandbox: Failed errno -13 op access flags 00 path /.flatpak-info
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/haswell/avx512_1/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/haswell/avx512_1/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/haswell/avx512_1/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/haswell/avx512_1
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/haswell/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/haswell/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/haswell/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/haswell
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/avx512_1/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/avx512_1/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/avx512_1/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/avx512_1
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/tls/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/tls
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/haswell/avx512_1/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/haswell/avx512_1/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/haswell/avx512_1/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/haswell/avx512_1
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/haswell/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/haswell/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/haswell/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/haswell
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/avx512_1/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/avx512_1/x86_64
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/avx512_1/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/avx512_1
Sandbox: Failed errno -2 op open flags 02000000 path /usr/lib64/gvfs/x86_64/libgvfscommon.so
Sandbox: Failed errno -2 op stat flags 00 path /usr/lib64/gvfs/x86_64
Sandbox: SandboxBroker: denied op=connect rflags=1 perms=0 path=/run/user/1000/bus for pid=9149
Sandbox: Failed errno -13 op connect flags 01 path /run/user/1000/bus
Sandbox: Failed errno -2 op access flags 00 path /home/sagitter/.config/gtk-4.0/Compose
Sandbox: SandboxBroker: denied op=access rflags=0 perms=0 path=/home/sagitter/.XCompose for pid=9149
Sandbox: Failed errno -13 op access flags 00 path /home/sagitter/.XCompose

Comment 3 Antonio T. sagitter 2021-04-10 12:23:10 UTC
I suspect this issue is related to the new rust-1.51.0

Comment 4 Antonio T. sagitter 2021-04-10 12:24:57 UTC
I suspect this issue is related to the new rust-1.51.0

Comment 5 Antonio T. sagitter 2021-04-10 12:25:43 UTC
I suspect this issue is related to the new rust-1.51.0

Comment 6 Neal Gompa 2021-04-11 14:57:54 UTC
This happens on Mageia 8 and Mageia Cauldron as well with Firefox ESR 78.9.0. However, we're using Rust 1.50, and not 1.51, so I'm not sure if Rust is the culprit.

Comment 7 Antonio T. sagitter 2021-04-11 15:40:09 UTC
Other supposed connections with Rust:

- Parabola i686 build of icecat 78.9.0 + rust version 1.51.0: crashes
- Guix + icecat 78.9.0 + rust version 1.41.1: none crash

@jistone,

Any chance to rebuild IceCat with Rust-1.49 in Fedora 33?
Can you do a Copr build of Rust-1.49 fc33?

Comment 8 Neal Gompa 2021-04-11 16:21:34 UTC
I've gotten some coredumps on Mageia and filed an upstream Firefox bug, feel free to add feedback there too.

Comment 9 Josh Stone 2021-04-12 19:02:55 UTC
These bugs also look relevant:
https://bugzilla.mozilla.org/show_bug.cgi?id=1673771
https://bugzilla.mozilla.org/show_bug.cgi?id=1691407

(In reply to Antonio T. sagitter from comment #7)
> Any chance to rebuild IceCat with Rust-1.49 in Fedora 33?
> Can you do a Copr build of Rust-1.49 fc33?

No, there's no easy way to do that -- a copr build of rust-1.49 needs 1.48 for bootstrapping, and so on.

Comment 10 Josh Stone 2021-04-12 19:07:55 UTC
Something similar also came up in chromium sandboxing:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/FF2HCG6YHBFWD4NEA7OYP3UCUONJ55M6/

Comment 11 Antonio T. sagitter 2021-04-16 09:44:04 UTC
'icecat-78.10.0 build1' is still effected by this issue.

Comment 12 ghost-87 2021-04-24 01:43:41 UTC
(In reply to Antonio T. sagitter from comment #11)
> 'icecat-78.10.0 build1' is still effected by this issue.

https://bugs.gentoo.org/773277#c14

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=092ab0c34647f7b6c826f65f8d2bdd39e90dda28

commit 092ab0c34647f7b6c826f65f8d2bdd39e90dda28
Author:     Thomas Deutschmann <whissi>
AuthorDate: 2021-04-23 21:39:40 +0000
Commit:     Thomas Deutschmann <whissi>
CommitDate: 2021-04-23 21:39:40 +0000

    www-client/firefox: fix runtime crash when built with >=rust-1.50
    
    Closes: https://bugs.gentoo.org/773277
    Package-Manager: Portage-3.0.18, Repoman-3.0.3
    Signed-off-by: Thomas Deutschmann <whissi>

 www-client/firefox/Manifest               | 1 +
 www-client/firefox/firefox-78.10.0.ebuild | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

Comment 13 Antonio T. sagitter 2021-04-24 12:46:33 UTC
(In reply to ghost-87 from comment #12)
> (In reply to Antonio T. sagitter from comment #11)
> > 'icecat-78.10.0 build1' is still effected by this issue.
> 
> https://bugs.gentoo.org/773277#c14
> 
> The bug has been closed via the following commit(s):
> 
> https://gitweb.gentoo.org/repo/gentoo.git/commit/
> ?id=092ab0c34647f7b6c826f65f8d2bdd39e90dda28
> 
> commit 092ab0c34647f7b6c826f65f8d2bdd39e90dda28
> Author:     Thomas Deutschmann <whissi>
> AuthorDate: 2021-04-23 21:39:40 +0000
> Commit:     Thomas Deutschmann <whissi>
> CommitDate: 2021-04-23 21:39:40 +0000
> 
>     www-client/firefox: fix runtime crash when built with >=rust-1.50
>     
>     Closes: https://bugs.gentoo.org/773277
>     Package-Manager: Portage-3.0.18, Repoman-3.0.3
>     Signed-off-by: Thomas Deutschmann <whissi>
> 
>  www-client/firefox/Manifest               | 1 +
>  www-client/firefox/firefox-78.10.0.ebuild | 2 +-
>  2 files changed, 2 insertions(+), 1 deletion(-)

Thank you!

Comment 14 Antonio T. sagitter 2021-04-24 18:10:40 UTC
Next build release fixes this issue.

Comment 15 Fedora Update System 2021-04-25 14:09:32 UTC
FEDORA-2021-e19cb6cd19 has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-e19cb6cd19

Comment 16 Fedora Update System 2021-04-25 14:09:33 UTC
FEDORA-2021-0e9456bc22 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-0e9456bc22

Comment 17 Fedora Update System 2021-04-26 00:57:33 UTC
FEDORA-2021-0e9456bc22 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-0e9456bc22`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-0e9456bc22

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 18 Fedora Update System 2021-04-26 01:46:26 UTC
FEDORA-2021-e19cb6cd19 has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-e19cb6cd19`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-e19cb6cd19

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 19 Fedora Update System 2021-05-03 02:05:26 UTC
FEDORA-2021-0e9456bc22 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 20 Fedora Update System 2021-05-04 01:17:12 UTC
FEDORA-2021-e19cb6cd19 has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.