I also seem to get the following AVC when this happens:

type=AVC msg=audit(1212265080.613:94): avc:  denied  { execstack } for 
pid=21302 comm="firefox" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process
type=SYSCALL msg=audit(1212265080.613:94): arch=40000003 syscall=125 success=no
exit=-13 a0=bfe7e000 a1=1000 a2=1000007 a3=fffff000 items=0 ppid=21288 pid=21302
auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500
tty=(none) ses=1 comm="firefox" exe="/usr/lib/firefox-3.0pre/firefox"
subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null)
type=ANOM_ABEND msg=audit(1212265080.617:95): auid=500 uid=500 gid=500 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0 pid=21302 comm="firefox" sig=6
type=ANOM_ABEND msg=audit(1212265212.569:96): auid=500 uid=500 gid=500 ses=1
subj=unconfined_u:unconfined_r:unconfined_t:s0 pid=21414 comm="firefox" sig=11


I get this running in both permissive and enforcing modes.  (So it still fails
if I run with 'setenforce 0').

Versions of pulseaudio packages:

pulseaudio-libs-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-esound-compat-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-utils-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-libs-zeroconf-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-module-x11-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-module-jack-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-module-bluetooth-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-module-gconf-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-debuginfo-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-libs-glib2-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-module-zeroconf-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-core-libs-0.9.11-0.3.svn20080529.fc10.i386
pulseaudio-module-lirc-0.9.11-0.3.svn20080529.fc10.i386

I added some missing '*-debuginfo' packages and reran (permissive mode):

[tbl@localhost ~]$ firefox -g
MOZILLA_FIVE_HOME=/usr/lib/firefox-3.0pre
 
LD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/plugins:/usr/lib/firefox-3.0pre
DISPLAY=:0.0
FONTCONFIG_PATH=/etc/fonts:/usr/lib/firefox-3.0pre/res/Xft
DYLD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre
    
LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/components:/usr/lib/firefox-3.0pre
       SHLIB_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre
          LIBPATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre
       ADDON_PATH=/usr/lib/firefox-3.0pre
      MOZ_PROGRAM=/usr/lib/firefox-3.0pre/firefox
      MOZ_TOOLKIT=
        moz_debug=1
     moz_debugger=
which: no ddd in (/usr/kerberos/bin:/usr/local/bin:/usr/bin:/bin:/home/tbl/bin)
/usr/bin/gdb /usr/lib/firefox-3.0pre/firefox -x /tmp/mozargs.UsdNO1
GNU gdb Fedora (6.8-9.fc10)
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...
(gdb) run
Starting program: /usr/lib/firefox-3.0pre/firefox 
[Thread debugging using libthread_db enabled]
[New Thread 0xb7f196d0 (LWP 22776)]

(firefox:22776): GnomeUI-WARNING **: While connecting to session manager:
Could not open network socket.
[New Thread 0xb7d18b90 (LWP 22783)]
[New Thread 0xb7317b90 (LWP 22784)]
[New Thread 0xb6891b90 (LWP 22785)]
[New Thread 0xb5e90b90 (LWP 22786)]
[New Thread 0xb548fb90 (LWP 22787)]
[Thread 0xb5e90b90 (LWP 22786) exited]
[Thread 0xb548fb90 (LWP 22787) exited]
[New Thread 0xb548fb90 (LWP 22788)]
[New Thread 0xb5e90b90 (LWP 22789)]
[New Thread 0xb3b58b90 (LWP 22790)]
[New Thread 0xb3157b90 (LWP 22791)]
[New Thread 0xb2756b90 (LWP 22792)]
[New Thread 0xb1ce7b90 (LWP 22793)]
[New Thread 0xb10ffb90 (LWP 22794)]
[Thread 0xb2756b90 (LWP 22792) exited]
[Thread 0xb1ce7b90 (LWP 22793) exited]
[New Thread 0xb1ce7b90 (LWP 22803)]
[Thread 0xb3b58b90 (LWP 22790) exited]
[Thread 0xb10ffb90 (LWP 22794) exited]
Detaching after fork from child process 22817.
Unsupported movie property id with value "flash_object"
Unsupported movie property style with value "position: absolute; top: 1px; left:
1px; height: 1px; width: 1px;"
Unsupported movie property quality with value "high"
Unsupported movie property pluginspage with value
"http://www.macromedia.com/go/getflashplayer"
unhandled event 19
Loading stream: https://mail.google.com/mail/im/sound.swf
[Thread 0xb1ce7b90 (LWP 22803) exited]
[Thread 0xb6891b90 (LWP 22785) exited]
[New Thread 0xb6891b90 (LWP 22883)]
[New Thread 0xb1ce7b90 (LWP 22884)]
[Thread 0xb1ce7b90 (LWP 22884) exited]
[New Thread 0xb1ce7b90 (LWP 22893)]
[New Thread 0xb10ffb90 (LWP 22894)]
[New Thread 0xb3b58b90 (LWP 22895)]
[Thread 0xb10ffb90 (LWP 22894) exited]
[Thread 0xb3b58b90 (LWP 22895) exited]
unhandled event 19
Loading stream:
http://www.youtube.com/swf/l.swf?video_id=fD-4FRTzxkI&rel=1&eurl=http%3A//googleblog.blogspot.com/2008/05/google-sites-now-open-to-everyone.html&iurl=http%3A//i.ytimg.com/vi/fD-4FRTzxkI/default.jpg&t=OEgsToPDskKX3tN_XQDxNP9YrteGh9sx
Loading stream: http://www.youtube.com/swf/cps.swf
SWFDEC: ERROR: swfdec_movie_as_drawing.c(255):
swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible,
resetting
SWFDEC: ERROR: swfdec_movie_as_drawing.c(255):
swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible,
resetting
[New Thread 0xb3b58b90 (LWP 22910)]
Loading stream: http://i.ytimg.com/crossdomain.xml
Loading stream: http://i.ytimg.com/vi/fD-4FRTzxkI/default.jpg
[Thread 0xb3b58b90 (LWP 22910) exited]
Loading stream:
http://www.youtube.com/api2_rest?method=youtube.videos.track_embed_video&video_id=fD-4FRTzxkI
Loading stream:
http://74.125.12.81/get_video?video_id=fD-4FRTzxkI&origin=ash-v557.ash.youtube.com&signature=629C2488488BBD87FBCE4654456F1A58BA3AFD3E.6B38CB8C4B9E1E76849303456EC318075753BE7A&ip=71.198.1.10&ipbits=16&expire=1212288463&key=yt1&sver=2
[New Thread 0xb3b58b90 (LWP 22923)]
Missing separate debuginfo for /home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so
firefox: pcm_pulse.c:274: pulse_write: Assertion `pcm->last_size >= (size *
pcm->frame_size)' failed.

Program received signal SIGABRT, Aborted.
0x00110416 in __kernel_vsyscall ()
Missing separate debuginfos, use: debuginfo-install ORBit2.i386 acl.i386
attr.i386 audiofile.i386 avahi.i386 bzip2.i386 dbus-glib.i386 dbus.i386
e2fsprogs.i386 esound.i386 expat.i386 fontconfig.i386 freetype.i386 gamin.i386
gdbm.i386 gnome-keyring.i386 gnutls.i386 gvfs.i386 hunspell.i386 keyutils.i386
krb5.i386 lcms.i386 libICE.i386 libSM.i386 libX11.i386 libXScrnSaver.i386
libXau.i386 libXcomposite.i386 libXcursor.i386 libXdmcp.i386 libXext.i386
libXfixes.i386 libXft.i386 libXi.i386 libXinerama.i386 libXrandr.i386
libXrender.i386 libXt.i386 libart_lgpl.i386 libbonobo.i386 libbonoboui.i386
libcap.i386 libgcrypt.i386 libgnome.i386 libgnomecanvas.i386 libgnomeui.i386
libgpg-error.i386 libjpeg.i386 libselinux.i386 libsoup.i386 libtasn1.i386
libxcb.i386 libxml2.i386 nss-mdns.i386 openssl.i686 pixman.i386 popt.i386 zlib.i386
(gdb) where
#0  0x00110416 in __kernel_vsyscall ()
#1  0x00a81610 in raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2  0x00a82fd8 in abort () at abort.c:88
#3  0x00a7a52e in __assert_fail (assertion=<value optimized out>, 
    file=<value optimized out>, line=<value optimized out>, 
    function=<value optimized out>) at assert.c:78
#4  0x007fcba5 in pulse_write (io=0xe3275c8, areas=0xbfe2f220, offset=0, 
    size=1024) at pcm_pulse.c:274
#5  0x04b9d151 in ioplug_priv_transfer_areas (pcm=<value optimized out>,
areas=Could not find the frame base for "ioplug_priv_transfer_areas".

) at pcm_ioplug.c:536
#6  0x04b59c29 in snd1_pcm_write_areas (pcm=<value optimized out>, 
    areas=<value optimized out>, offset=<value optimized out>, 
    size=<value optimized out>, func=<value optimized out>) at pcm.c:6472
#7  0x04b9d555 in snd_pcm_ioplug_writei (pcm=<value optimized out>, 
    buffer=<value optimized out>, size=<value optimized out>)
    at pcm_ioplug.c:551
#8  0x04b54684 in snd_pcm_writei (pcm=<value optimized out>, 
    buffer=<value optimized out>, size=<value optimized out>)
    at pcm_local.h:511
#9  0x0067c60d in try_write_so_pa_gets_it (stream=<value optimized out>)
    at swfdec_playback.c:135
#10 0x0067c1b4 in swfdec_playback_stream_start (stream=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at swfdec_playback.c:214
#11 0x0067c3f4 in swfdec_playback_stream_open (sound=<value optimized out>, 
    audio=<value optimized out>) at swfdec_playback.c:297
#12 0x00d5412a in IA__g_cclosure_marshal_VOID__OBJECT (
    closure=<value optimized out>, return_value=Could not find the frame base
for "IA__g_cclosure_marshal_VOID__OBJECT".
) at gmarshal.c:636
#13 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, 
    return_value=<value optimized out>, n_param_values=<value optimized out>, 
    param_values=<value optimized out>, invocation_hint=<value optimized out>)
    at gclosure.c:490
#14 0x00d5c867 in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at gsignal.c:2440
#15 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, 
    var_args=<value optimized out>) at gsignal.c:2199
#16 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for
"IA__g_signal_emit".
) at gsignal.c:2243
#17 0x006ec441 in swfdec_player_unlock_soft (player=<value optimized out>)
    at swfdec_player.c:1278
#18 0x006ec6fa in swfdec_player_unlock (player=<value optimized out>)
    at swfdec_player.c:1604
#19 0x006edb17 in swfdec_player_do_advance (player=<value optimized out>, 
    msecs=<value optimized out>, audio_samples=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at swfdec_player.c:1475
#20 0x00722d53 in swfdec_marshal_VOID__ULONG_UINT (
    closure=<value optimized out>, return_value=Could not find the frame base
for "swfdec_marshal_VOID__ULONG_UINT".
) at swfdec_marshal.c:285
#21 0x00d448d9 in g_type_class_meta_marshal (closure=<value optimized out>, 
    return_value=Could not find the frame base for "g_type_class_meta_marshal".
) at gclosure.c:567
#22 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, 
    return_value=<value optimized out>, n_param_values=<value optimized out>, 
    param_values=<value optimized out>, invocation_hint=<value optimized out>)
    at gclosure.c:490
#23 0x00d5c51f in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at gsignal.c:2478
#24 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, 
    var_args=<value optimized out>) at gsignal.c:2199
#25 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for
"IA__g_signal_emit".
) at gsignal.c:2243
#26 0x006ea5ba in swfdec_player_advance (player=<value optimized out>, 
    msecs=<value optimized out>) at swfdec_player.c:2612
#27 0x0067cbe4 in swfdec_iterate_dispatch (source_=<value optimized out>, 
    callback=Could not find the frame base for "swfdec_iterate_dispatch".
) at swfdec_source.c:109
#28 0x00c83f38 in IA__g_main_context_dispatch (context=<value optimized out>)
    at gmain.c:2063
---Type <return> to continue, or q <return> to quit---
#29 0x00c8749b in g_main_context_iterate (context=<value optimized out>, 
    block=<value optimized out>, dispatch=<value optimized out>, self=Could not
find the frame base for "g_main_context_iterate".
)
    at gmain.c:2696
#30 0x00c87618 in IA__g_main_context_iteration (context=<value optimized out>, 
    may_block=<value optimized out>) at gmain.c:2759
#31 0x05bae31c in nsAppShell::ProcessNextNativeEvent (this=Could not find the
frame base for "nsAppShell::ProcessNextNativeEvent(int)".
)
    at nsAppShell.cpp:144
#32 0x05bc4c44 in nsBaseAppShell::DoProcessNextNativeEvent (this=Could not find
the frame base for "nsBaseAppShell::DoProcessNextNativeEvent(int)".
)
    at nsBaseAppShell.cpp:151
#33 0x05bc4e4d in nsBaseAppShell::OnProcessNextEvent (
    this=<value optimized out>, thr=<value optimized out>, 
    mayWait=<value optimized out>, recursionDepth=Could not find the frame base
for "nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned int)".
) at nsBaseAppShell.cpp:278
#34 0x05c82426 in nsThread::ProcessNextEvent (this=<value optimized out>, 
    mayWait=<value optimized out>, result=<value optimized out>)
    at nsThread.cpp:497
#35 0x05c4f424 in NS_ProcessNextEvent_P (thread=<value optimized out>, 
    mayWait=<value optimized out>) at nsThreadUtils.cpp:227
#36 0x05bc4f24 in nsBaseAppShell::Run (this=<value optimized out>)
    at nsBaseAppShell.cpp:170
#37 0x05a7b720 in nsAppStartup::Run (this=<value optimized out>)
    at nsAppStartup.cpp:181
#38 0x0544ea11 in XRE_main (argc=<value optimized out>, 
    argv=<value optimized out>, aAppData=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at nsAppRunner.cpp:3170
#39 0x08049169 in main (argc=1, argv=0xbfe34924) at nsXULStub.cpp:364
(gdb) quit
The program is running.  Exit anyway? (y or n) y
[tbl@localhost ~]$ 

a) run the line suggested by gdb (use: debuginfo-install <long list of
package>), to get complete backtraces.
b) this is however complete enough to blame swfdec instead ;-)

(In reply to comment #4)
> a) run the line suggested by gdb (use: debuginfo-install <long list of
> package>), to get complete backtraces.
> b) this is however complete enough to blame swfdec instead ;-)

Thanks.  For completeness, I ran the 'debuginfo-install' as suggested in a), and
regerated the backtrace:

[tbl@localhost ~]$ firefox -g
MOZILLA_FIVE_HOME=/usr/lib/firefox-3.0pre
 
LD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/plugins:/usr/lib/firefox-3.0pre
DISPLAY=:0.0
FONTCONFIG_PATH=/etc/fonts:/usr/lib/firefox-3.0pre/res/Xft
DYLD_LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre
    
LIBRARY_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre/components:/usr/lib/firefox-3.0pre
       SHLIB_PATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre
          LIBPATH=/usr/lib/firefox-3.0pre:/usr/lib/firefox-3.0pre
       ADDON_PATH=/usr/lib/firefox-3.0pre
      MOZ_PROGRAM=/usr/lib/firefox-3.0pre/firefox
      MOZ_TOOLKIT=
        moz_debug=1
     moz_debugger=
which: no ddd in (/usr/kerberos/bin:/usr/local/bin:/usr/bin:/bin:/home/tbl/bin)
/usr/bin/gdb /usr/lib/firefox-3.0pre/firefox -x /tmp/mozargs.I1ZoTJ
GNU gdb Fedora (6.8-10.fc10)
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...
(gdb) run
Starting program: /usr/lib/firefox-3.0pre/firefox 
[Thread debugging using libthread_db enabled]
[New Thread 0xb7f2c6d0 (LWP 5850)]

(firefox:5850): GnomeUI-WARNING **: While connecting to session manager:
Could not open network socket.
[New Thread 0xb7d2bb90 (LWP 5861)]
[New Thread 0xb732ab90 (LWP 5862)]
[New Thread 0xb68a4b90 (LWP 5863)]
[New Thread 0xb5ea3b90 (LWP 5864)]
[New Thread 0xb54a2b90 (LWP 5865)]
[Thread 0xb5ea3b90 (LWP 5864) exited]
[Thread 0xb54a2b90 (LWP 5865) exited]
[New Thread 0xb54a2b90 (LWP 5866)]
[New Thread 0xb5ea3b90 (LWP 5867)]
[New Thread 0xb48beb90 (LWP 5868)]
[Thread 0xb48beb90 (LWP 5868) exited]
[New Thread 0xb48beb90 (LWP 5869)]
[New Thread 0xb305bb90 (LWP 5870)]
[New Thread 0xb2640b90 (LWP 5871)]
[Thread 0xb2640b90 (LWP 5871) exited]
[New Thread 0xb2640b90 (LWP 5872)]
[New Thread 0xb17fcb90 (LWP 5877)]
[New Thread 0xb0dfbb90 (LWP 5878)]
[New Thread 0xb03fab90 (LWP 5879)]
[Thread 0xb17fcb90 (LWP 5877) exited]
[Thread 0xb0dfbb90 (LWP 5878) exited]
[Thread 0xb03fab90 (LWP 5879) exited]
[Thread 0xb48beb90 (LWP 5869) exited]
[New Thread 0xb48beb90 (LWP 5930)]
[New Thread 0xb03fab90 (LWP 5931)]
[New Thread 0xb0dfbb90 (LWP 5932)]
[Thread 0xb2640b90 (LWP 5872) exited]
[Thread 0xb48beb90 (LWP 5930) exited]
[Thread 0xb0dfbb90 (LWP 5932) exited]
[Thread 0xb03fab90 (LWP 5931) exited]
[Thread 0xb68a4b90 (LWP 5863) exited]
[New Thread 0xb68a4b90 (LWP 5988)]
[New Thread 0xb03fab90 (LWP 5997)]
Detaching after fork from child process 6002.
unhandled event 19
Loading stream:
http://www.youtube.com/swf/l.swf?video_id=fD-4FRTzxkI&rel=1&eurl=http%3A//googleblog.blogspot.com/2008/05/google-sites-now-open-to-everyone.html&iurl=http%3A//i.ytimg.com/vi/fD-4FRTzxkI/default.jpg&t=OEgsToPDskK0PQX4C7Zp4EOUkwZbQUM8
Loading stream: http://www.youtube.com/swf/cps.swf
SWFDEC: ERROR: swfdec_movie_as_drawing.c(255):
swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible,
resetting
SWFDEC: ERROR: swfdec_movie_as_drawing.c(255):
swfdec_sprite_movie_beginGradientFill: gradient transform matrix not invertible,
resetting
Loading stream: http://i.ytimg.com/crossdomain.xml
Loading stream: http://i.ytimg.com/vi/fD-4FRTzxkI/default.jpg
Loading stream:
http://www.youtube.com/api2_rest?method=youtube.videos.track_embed_video&video_id=fD-4FRTzxkI
Loading stream:
http://cache.googlevideo.com/get_video?video_id=fD-4FRTzxkI&origin=ash-v557.ash.youtube.com&signature=6514E1C81A222516A69B272CD13B2628A0C46B0C.9497A9D3CD8E6D7A28EA9156EB68AEEE0031AB14&ip=24.130.149.10&ipbits=16&expire=1212437156&key=yt1&sver=2
[New Thread 0xb0dfbb90 (LWP 6024)]
Missing separate debuginfo for /home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so
firefox: pcm_pulse.c:274: pulse_write: Assertion `pcm->last_size >= (size *
pcm->frame_size)' failed.

Program received signal SIGABRT, Aborted.
0x00110416 in __kernel_vsyscall ()
Missing separate debuginfos, use: debuginfo-install keyutils.i386
(gdb) where
#0  0x00110416 in __kernel_vsyscall ()
#1  0x00a81610 in raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2  0x00a82fd8 in abort () at abort.c:88
#3  0x00a7a52e in __assert_fail (assertion=<value optimized out>, 
    file=<value optimized out>, line=<value optimized out>, 
    function=<value optimized out>) at assert.c:78
#4  0x007f7ba5 in pulse_write (io=0xa7bd630, areas=0xbfc42040, offset=0, 
    size=1024) at pcm_pulse.c:274
#5  0x04b9d151 in ioplug_priv_transfer_areas (pcm=<value optimized out>,
areas=Could not find the frame base for "ioplug_priv_transfer_areas".

) at pcm_ioplug.c:536
#6  0x04b59c29 in snd1_pcm_write_areas (pcm=<value optimized out>, 
    areas=<value optimized out>, offset=<value optimized out>, 
    size=<value optimized out>, func=<value optimized out>) at pcm.c:6472
#7  0x04b9d555 in snd_pcm_ioplug_writei (pcm=<value optimized out>, 
    buffer=<value optimized out>, size=<value optimized out>)
    at pcm_ioplug.c:551
#8  0x04b54684 in snd_pcm_writei (pcm=<value optimized out>, 
    buffer=<value optimized out>, size=<value optimized out>)
    at pcm_local.h:511
#9  0x0068860d in try_write_so_pa_gets_it (stream=<value optimized out>)
    at swfdec_playback.c:135
#10 0x006881b4 in swfdec_playback_stream_start (stream=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at swfdec_playback.c:214
#11 0x006883f4 in swfdec_playback_stream_open (sound=<value optimized out>, 
    audio=<value optimized out>) at swfdec_playback.c:297
#12 0x00d5412a in IA__g_cclosure_marshal_VOID__OBJECT (
    closure=<value optimized out>, return_value=Could not find the frame base
for "IA__g_cclosure_marshal_VOID__OBJECT".
) at gmarshal.c:636
#13 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, 
    return_value=<value optimized out>, n_param_values=<value optimized out>, 
    param_values=<value optimized out>, invocation_hint=<value optimized out>)
    at gclosure.c:490
#14 0x00d5c867 in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at gsignal.c:2440
#15 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, 
    var_args=<value optimized out>) at gsignal.c:2199
#16 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for
"IA__g_signal_emit".
) at gsignal.c:2243
#17 0x006f8441 in swfdec_player_unlock_soft (player=<value optimized out>)
    at swfdec_player.c:1278
#18 0x006f86fa in swfdec_player_unlock (player=<value optimized out>)
    at swfdec_player.c:1604
#19 0x006f9b17 in swfdec_player_do_advance (player=<value optimized out>, 
    msecs=<value optimized out>, audio_samples=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at swfdec_player.c:1475
#20 0x0072ed53 in swfdec_marshal_VOID__ULONG_UINT (
    closure=<value optimized out>, return_value=Could not find the frame base
for "swfdec_marshal_VOID__ULONG_UINT".
) at swfdec_marshal.c:285
#21 0x00d448d9 in g_type_class_meta_marshal (closure=<value optimized out>, 
    return_value=Could not find the frame base for "g_type_class_meta_marshal".
) at gclosure.c:567
#22 0x00d4615b in IA__g_closure_invoke (closure=<value optimized out>, 
    return_value=<value optimized out>, n_param_values=<value optimized out>, 
    param_values=<value optimized out>, invocation_hint=<value optimized out>)
    at gclosure.c:490
#23 0x00d5c51f in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at gsignal.c:2478
#24 0x00d5df00 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, 
    var_args=<value optimized out>) at gsignal.c:2199
#25 0x00d5e3a6 in IA__g_signal_emit (instance=Could not find the frame base for
"IA__g_signal_emit".
) at gsignal.c:2243
#26 0x006f65ba in swfdec_player_advance (player=<value optimized out>, 
    msecs=<value optimized out>) at swfdec_player.c:2612
#27 0x00688be4 in swfdec_iterate_dispatch (source_=<value optimized out>, 
    callback=Could not find the frame base for "swfdec_iterate_dispatch".
) at swfdec_source.c:109
#28 0x00c83f38 in IA__g_main_context_dispatch (context=<value optimized out>)
    at gmain.c:2063
---Type <return> to continue, or q <return> to quit---
#29 0x00c8749b in g_main_context_iterate (context=<value optimized out>, 
    block=<value optimized out>, dispatch=<value optimized out>, self=Could not
find the frame base for "g_main_context_iterate".
)
    at gmain.c:2696
#30 0x00c87618 in IA__g_main_context_iteration (context=<value optimized out>, 
    may_block=<value optimized out>) at gmain.c:2759
#31 0x05bae31c in nsAppShell::ProcessNextNativeEvent (this=Could not find the
frame base for "nsAppShell::ProcessNextNativeEvent(int)".
)
    at nsAppShell.cpp:144
#32 0x05bc4c44 in nsBaseAppShell::DoProcessNextNativeEvent (this=Could not find
the frame base for "nsBaseAppShell::DoProcessNextNativeEvent(int)".
)
    at nsBaseAppShell.cpp:151
#33 0x05bc4e4d in nsBaseAppShell::OnProcessNextEvent (
    this=<value optimized out>, thr=<value optimized out>, 
    mayWait=<value optimized out>, recursionDepth=Could not find the frame base
for "nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned int)".
) at nsBaseAppShell.cpp:278
#34 0x05c82426 in nsThread::ProcessNextEvent (this=<value optimized out>, 
    mayWait=<value optimized out>, result=<value optimized out>)
    at nsThread.cpp:497
#35 0x05c4f424 in NS_ProcessNextEvent_P (thread=<value optimized out>, 
    mayWait=<value optimized out>) at nsThreadUtils.cpp:227
#36 0x05bc4f24 in nsBaseAppShell::Run (this=<value optimized out>)
    at nsBaseAppShell.cpp:170
#37 0x05a7b720 in nsAppStartup::Run (this=<value optimized out>)
    at nsAppStartup.cpp:181
#38 0x0544ea11 in XRE_main (argc=<value optimized out>, 
    argv=<value optimized out>, aAppData=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at nsAppRunner.cpp:3170
#39 0x08049169 in main (argc=1, argv=0xbfc47744) at nsXULStub.cpp:364
(gdb) quit
The program is running.  Exit anyway? (y or n) y
[tbl@localhost ~]$ 

I continue to get the above crashes/traces on .swf objects, e.g. youtube.

Is there more debugging info I can provide to help?

BTW, this does NOT abort if I kill the pulseaudio daemon.

Lennart, any ideas?

I now also see this when trying to view the swf's on http://nytimes.com:

Loading stream: http://graphics8.nytimes.com/feedroom/nytc3/creative/nytc_front.swf
SWFDEC: ERROR: swfdec_net_connection.c(107): swfdec_net_connection_connect:
FIXME: using NetConnection with non-null URLs is not implemented
Loading stream:
http://oas-fr.video.on.nytimes.com/RealMedia/ads/adstream_sx.ads/nytd.com/front/homepage/40037@x16
SWFDEC: ERROR: swfdec_net_connection.c(107): swfdec_net_connection_connect:
FIXME: using NetConnection with non-null URLs is not implemented
[Thread 0xb27feb90 (LWP 4775) exited]

Here is another:

Loading stream: http://graphics8.nytimes.com/feedroom/nytc3/creative/nytc_front.swf
Loading stream:
http://oas-fr.video.on.nytimes.com/RealMedia/ads/adstream_sx.ads/nytd.com/front/homepage/6537@x16
SWFDEC: ERROR: swfdec_net_connection.c(107): swfdec_net_connection_connect:
FIXME: using NetConnection with non-null URLs is not implemented

Stream does not play.

Are you able to reproduce this bug with the
http://googleblog.blogspot.com/2008/05/google-sites-now-open-to-everyone.html
after upgrading to the latest versions of F9 packages. It just works for me now.

I'm on rawhide.

swfdec/flash fails badly for me:

[tbl@localhost plugins]$ firefox 
unhandled event 19
Loading stream: http://s.ytimg.com/yt/swf/watch-vfl47060.swf
Loading stream: http://youtube.com/version-check.swf
Loading stream: http://youtube.com/crossdomain.xml
Loading stream:
http://v5.cache.googlevideo.com/get_video?video_id=1tBeqxKKseA&origin=lax-v19.lax.youtube.com&signature=9755EEEA976018517A5FE547C4AF8A579CB5E9AB.D28B193F4FB4D1CC992FED09DC4DC6C6C4CAF426&ip=24.130.149.10&ipbits=16&expire=1216846951&key=yt1&sver=2
firefox: pcm_pulse.c:274: pulse_write: Assertion `pcm->last_size >= (size *
pcm->frame_size)' failed.
/usr/lib/firefox-3.0/run-mozilla.sh: line 131: 21137 Aborted                
"$prog" ${1+"$@"}
[tbl@localhost plugins]$ 

This is with a fresh install of
Rebuilding rpms from deltarpms
(1/4): swfdec-mozilla-0.7.2-1.fc10.i386.rpm              |  40 kB     00:00     
(2/4): swfdec-gtk-0.7.2-1.fc10.i386.rpm                  |  42 kB     00:00     
(3/4): swfdec-mozilla-debuginfo-0.7.2-1.fc10.i386.rpm    | 148 kB     00:00     
(4/4): swfdec-0.7.2-1.fc10.i386.rpm                      | 419 kB     00:00     
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : swfdec-mozilla-debuginfo                          [1/4] 
  Installing     : swfdec                                            [2/4] 
  Installing     : swfdec-gtk                                        [3/4] 
  Installing     : swfdec-mozilla                                    [4/4] 

Installed: swfdec-mozilla.i386 0:0.7.2-1.fc10 swfdec-mozilla-debuginfo.i386
0:0.7.2-1.fc10
Dependency Installed: swfdec.i386 0:0.7.2-1.fc10 swfdec-gtk.i386 0:0.7.2-1.fc10
Complete!
[root@localhost ~]# 

Works fine if I remove all swfdec packages and install Adobe flash-plugin.

In addition to the above crash, I get an earlier SELinux AVC if I run in
enforcing mode: 


(firefox:21045): GStreamer-WARNING **: Failed to load plugin
'/home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so':
/home/tbl/.gstreamer-0.10/plugins/libgstflump3dec.so: cannot enable executable
stack as shared object requires: Permission denied
SWFDEC: ERROR: swfdec_codec_gst.c(211): swfdec_gst_decoder_init: failed to
create decoder
SWFDEC: ERROR: swfdec_audio_decoder.c(199): swfdec_audio_decoder_errorv: error
decoding audio: no suitable decoder for audio codec 2

Rhythmbox has no issues with this plugin....

OK, concerning AVC denials -- I think

touch /.autorelabel
reboot

could help a little. Also, you can just wipe up ~/.gstreamer-0.10/ (it will be
regenerated automagically) and check whether it wouldn't help.

And also the output of the command

	rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin*

would be helpful.

Thanks in advance.

[tbl@localhost ~]$ rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin*
firefox-debuginfo-3.0.1-1.fc10.i386
flash-plugin-9.0.124.0-release.i386
xulrunner-1.9.0.1-2.fc10.i386
xulrunner-debuginfo-1.9.0.1-2.fc10.i386
xulrunner-devel-1.9.0.1-2.fc10.i386
firefox-3.0.1-1.fc10.i386
[tbl@localhost ~]$ 

But the above is after an update, not the packages I had installed for #11.

In general, I'm running latest rawhide.

Regarding AVC, here is the raw message:

type=AVC msg=audit(1216825352.350:74): avc:  denied  { execmem } for  pid=21137
comm="firefox" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process
type=SYSCALL msg=audit(1216825352.350:74): arch=40000003 syscall=125 success=yes
exit=0 a0=bfdc7000 a1=1000 a2=1000007 a3=fffff000 items=0 ppid=21123 pid=21137
auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500
tty=pts1 ses=1 comm="firefox" exe="/usr/lib/firefox-3.0/firefox"
subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null)

[tbl@localhost .gstreamer-0.10]$ ls -lZ plugins
-rwxrwxr-x  tbl tbl system_u:object_r:textrel_shlib_t libgstffmpeg.so
-rwxr-xr-x  tbl tbl unconfined_u:object_r:textrel_shlib_t libgstflump3dec.so
-rwxr-xr-x  tbl tbl unconfined_u:object_r:textrel_shlib_t libgstflump3dec.so.old
-rw-r--r--  tbl tbl system_u:object_r:user_home_t    libgstflumpegdemux.a
-rwxr-xr-x  tbl tbl system_u:object_r:user_home_t    libgstflumpegdemux.la
-rwxr-xr-x  tbl tbl system_u:object_r:textrel_shlib_t libgstflumpegdemux.so
[tbl@localhost .gstreamer-0.10]$ 

so, the fluendo codec is already marked 'textrel_shlib_t', but ....

Believe this is usually caused by some issue with the app, not the label.

Regarding 'wiping up' ~/.gstreamer-0.10/, I'm guessing you mean the registry
files, not the plugin directory, right?

BTW,

[tbl@localhost .gstreamer-0.10]$ ls -l
total 1288
drwxr-xr-x 2 tbl tbl   4096 2008-06-26 13:50 plugins
-rw------- 1 tbl tbl 299584 2008-07-25 06:57 registry.i386.bin
-rw------- 1 tbl tbl 539740 2008-06-18 06:55 registry.i386.xml
-rw------- 1 tbl tbl 439747 2007-05-30 17:41 registry.i686.xml
[tbl@localhost .gstreamer-0.10]$ 


Normal to have both i386 and i686 registry.xml files?

(In reply to comment #13)
> [tbl@localhost ~]$ rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin*
> firefox-debuginfo-3.0.1-1.fc10.i386
> flash-plugin-9.0.124.0-release.i386
> xulrunner-1.9.0.1-2.fc10.i386
> xulrunner-debuginfo-1.9.0.1-2.fc10.i386
> xulrunner-devel-1.9.0.1-2.fc10.i386
> firefox-3.0.1-1.fc10.i386
> [tbl@localhost ~]$ 

You are missing nspluginwrapper -- your AVC denials are probably caused by this
-- remember since F9 we have SELinux confined nspluginwrapper (which is a good
thing!). Install nspluginwrapper package and run mozilla-plugin-config -f -c.
DOes it help?

> Believe this is usually caused by some issue with the app, not the label.

90% of all SELinux issues are caused by labels. But see above about nspluginwrapper.

> Regarding 'wiping up' ~/.gstreamer-0.10/, I'm guessing you mean the registry
> files, not the plugin directory, right?

Yeah, for me it is the same, I don't have any plugins ~/ (and now I wonder how
much supported plugins in ~/.gstreamer*/ actually are).

(In reply to comment #14)
> BTW,
> 
> [tbl@localhost .gstreamer-0.10]$ ls -l
> total 1288
> drwxr-xr-x 2 tbl tbl   4096 2008-06-26 13:50 plugins
> -rw------- 1 tbl tbl 299584 2008-07-25 06:57 registry.i386.bin
> -rw------- 1 tbl tbl 539740 2008-06-18 06:55 registry.i386.xml
> -rw------- 1 tbl tbl 439747 2007-05-30 17:41 registry.i686.xml
> [tbl@localhost .gstreamer-0.10]$ 
> 
> 
> Normal to have both i386 and i686 registry.xml files?

Yeah, that was another reason why I asked to wipe up this folder -- I suspect
some old goo staying there. Removing these registry files should be absolutely
harmless.

So, what's the situation now?

OK.  I cleared out the .bin and the .xml files from ~/.gstr*

I installed nspluginwrapper, and then ran mozilla-plugin-config.  Here is what I
got:

[tbl@localhost .gstreamer-0.10]$ mozilla-plugin-config -f -c
*** NSPlugin Viewer  *** ERROR:
/usr/lib/mozilla/plugins/librhythmbox-itms-detection-plugin.so: undefined
symbol: __gxx_personality_v0
[tbl@localhost .gstreamer-0.10]$ 

Safe to proceed?

I reinstalled the swfec* packages, restarted firefox, browsed to youtube.

Running in SELinux enforcing mode, I get video now, but no audio.

Here is the AVC:

type=AVC msg=audit(1217002882.566:29): avc:  denied  { write } for  pid=3918
comm="npviewer.bin" name="native" dev=dm-0 ino=1703940
scontext=unconfined_u:unconfined_r:nsplugin_t:s0
tcontext=unconfined_u:object_r:user_home_t:s0 tclass=sock_file
type=SYSCALL msg=audit(1217002882.566:29): arch=40000003 syscall=102 success=yes
exit=0 a0=3 a1=bfa724f0 a2=327830 a3=0 items=0 ppid=3745 pid=3918 auid=500
uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500
tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin"
subj=unconfined_u:unconfined_r:nsplugin_t:s0 key=(null)

The write to the pulse socket (~/.pulse/native) is failing.

If I put system in permissive mode, worse, I get an abort:

[tbl@localhost .pulse]$ firefox
unhandled event 19
*** NSPlugin Wrapper *** WARNING: unhandled variable 11 in NPP_GetValue()
*** NSPlugin Wrapper *** WARNING: unhandled variable 11 in NPP_GetValue()
Loading stream: http://www.youtube.com/version-check.swf

** (npviewer.bin:4765): CRITICAL **: swfmoz_player_render: assertion
`!gdk_region_empty (region)' failed
Loading stream: http://s.ytimg.com/yt/swf/watch-vfl48341.swf
Loading stream: http://www.youtube.com/crossdomain.xml
Loading stream:
http://v8.cache.googlevideo.com/get_video?video_id=A0qm8nq8RcA&origin=chi-v242.chi.youtube.com&signature=D7D8822DED076A559DFF3BA478B32A2FA2962559.42289726664E32A3100704BEF4EF315C6237EA25&ip=204.2.135.5&ipbits=16&expire=1217024531&key=yt1&sver=2
npviewer.bin: pcm_pulse.c:296: pulse_write: Assertion `pcm->last_size >= (size *
pcm->frame_size)' failed.
*** NSPlugin Wrapper *** ERROR: NPP_WriteReady() invoke: Connection reset by peer
*** NSPlugin Wrapper *** ERROR: NPP_Write() invoke: Connection closed
*** NSPlugin Wrapper *** ERROR: NPP_DestroyStream() invoke: Connection closed

(firefox:4721): GLib-CRITICAL **: g_hash_table_remove_internal: assertion
`hash_table != NULL' failed
*** NSPlugin Wrapper *** ERROR: NPP_URLNotify() invoke: Connection closed

Did you get any additional avc messages when you put it in permissive mode?

Nope.  Here is a snippet from /var/log/audit/audit.log (now actually
audit.log.1) showing the "setenforce 0" followed by the crash.

type=USER_AVC msg=audit(1217018107.831:36): user pid=2429 uid=81 auid=4294967295
ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: 
received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?,
addr=?, terminal=?)'
type=SYSCALL msg=audit(1217018107.828:35): arch=40000003 syscall=4 success=yes
exit=1 a0=3 a1=bfcaa3f4 a2=1 a3=bfcaa3f4 items=0 ppid=4100 pid=4392 auid=500
uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2
comm="setenforce" exe="/usr/sbin/setenforce"
subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null)
type=AVC msg=audit(1217018206.506:37): avc:  denied  { write } for  pid=4523
comm="npviewer.bin" name="native" dev=dm-0 ino=5111827
scontext=unconfined_u:unconfined_r:nsplugin_t:s0
tcontext=unconfined_u:object_r:user_home_t:s0 tclass=sock_file
type=SYSCALL msg=audit(1217018206.506:37): arch=40000003 syscall=102 success=yes
exit=0 a0=3 a1=bff75a50 a2=3dd690 a3=0 items=0 ppid=4464 pid=4523 auid=500
uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1
ses=2 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin"
subj=unconfined_u:unconfined_r:nsplugin_t:s0 key=(null)
type=ANOM_ABEND msg=audit(1217018206.616:38): auid=500 uid=500 gid=500 ses=2
subj=unconfined_u:unconfined_r:nsplugin_t:s0 pid=4523 comm="npviewer.bin" sig=6

This bug appears to have been reported against 'rawhide' during the Fedora 10 development cycle.
Changing version to '10'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

This message is a reminder that Fedora 10 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 10.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '10'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 10's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 10 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Fedora 10 changed to end-of-life (EOL) status on 2009-12-17. Fedora 10 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.