Bug 573367 - SPICE - Firefox crash when establishing spice session with non-root user from REHL client
Summary: SPICE - Firefox crash when establishing spice session with non-root user from...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: spice-xpi
Version: 5.5
Hardware: x86_64
OS: Linux
high
urgent
Target Milestone: rc
: ---
Assignee: Yuval Kashtan
QA Contact: Desktop QE
URL:
Whiteboard: VDI
Depends On: 576564
Blocks: 550056 610041
TreeView+ depends on / blocked
 
Reported: 2010-03-14 12:51 UTC by Haim
Modified: 2014-01-13 00:45 UTC (History)
10 users (show)

Fixed In Version: spice-xpi-2.2-1.el5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-21 05:17:58 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2012:0316 0 normal SHIPPED_LIVE spice-xpi bug fix and enhancement update 2012-02-21 07:24:28 UTC

Description Haim 2010-03-14 12:51:52 UTC
Description of problem:

when trying to establish spice connection from Linux client towards one of the guests with user which is not root(created user named 'haim'), Firefox crash (segmentation fault) and suddenly closed (see attached log).

The operation do succeed when accessing with 'root' user.

non-working scenario: 

pre-configuration: 

add new user - command: adduser haim 
set new pass - command: passwd haim (123456)

1. login to 'x' environment with non-root user (haim)
2. run Firefox from terminal 
3. access user portal and initiate spice on one of the guests machines (configured qxl on the machine - several monitors were configured). 
4. Firefox crashed - attached pdg log

working scenario: 

1. login to 'x' environment with non-root user (haim)
2. open terminal and change user to 'root' 
3. run Firefox from terminal 
4. access user portal and initiate spice on one of the guests machines (configured qxl on the machine - several monitors were configured). 
5. VM is opened


qspice-client version: 0.3.0.2.el5
spice-xpi version: 2.2.0el5


Version-Release number of selected component (if applicable): SM49


How reproducible: always 


Steps to Reproduce: see above

Actual results:


Expected results: spice client should work 


Additional info:

Program received signal SIGSEGV, Segmentation fault.
0x000000315f061a7e in fputs () from /lib64/libc.so.6
(gdb) where
#0  0x000000315f061a7e in fputs () from /lib64/libc.so.6
#1  0x00002aaab4776b4c in nsPluginInstance::Connect() ()
   from /usr/lib64/firefox-3.0.16/plugins/libnsISpicec.so
#2  0x00002aaab4772d02 in nsScriptablePeer::Connect() ()
   from /usr/lib64/firefox-3.0.16/plugins/libnsISpicec.so
#3  0x0000003175d1824c in NS_InvokeByIndex_P (that=0x2aaaac989c50, 
    methodIndex=41, paramCount=0, params=0xa2d2d)
    at xptcinvoke_x86_64_linux.cpp:208
#4  0x000000317526e0ed in XPCWrappedNative::CallMethod (ccx=..., 
    mode=CALL_METHOD) at xpcwrappednative.cpp:2395
#5  0x0000003175275307 in XPC_WN_CallMethod (cx=0x2aaaac348ed0, 
    obj=<value optimized out>, argc=<value optimized out>, 
    argv=<value optimized out>, vp=<value optimized out>)
    at xpcwrappednativejsops.cpp:1583
#6  0x0000003174255496 in js_Invoke (cx=0x2aaaac348ed0, argc=0, 
    vp=0x2aaaac06ea38, flags=<value optimized out>) at jsinterp.c:1326
#7  0x0000003174247960 in js_Interpret (cx=0x2aaaac348ed0) at jsinterp.c:4887
#8  0x0000003174255578 in js_Invoke (cx=0x2aaaac348ed0, argc=0, 
    vp=0x2aaaac06ea18, flags=666925) at jsinterp.c:1334
#9  0x0000003174241a70 in fun_apply (cx=0x2aaaac348ed0, argc=2, 
    vp=0x2aaaac06e9e8) at jsfun.c:1678
#10 0x0000003174246b8b in js_Interpret (cx=0x2aaaac348ed0

Comment 1 Yuval Kashtan 2010-03-15 08:05:38 UTC
happens because xpi create a tmp file with the same name over and over again.

Comment 7 Alexey Eromenko 2010-06-23 11:38:54 UTC
update:
sm74. This works for me with unprivileged user.

RHEL-5.5 + FFox 3 client (both 32 and 64-bit), SELinux disabled.

Few components updated:

qspice-client-0.3.0-2.el5_5
spice-xpi-2.2-1.el5_5
nspluginwrapper-1.3.0-9.el5

Comment 8 Haim 2010-06-23 21:56:44 UTC
why selinux was disabled during your tests ?

Comment 9 Alexey Eromenko 2010-06-24 08:33:13 UTC
Because there is a known bug with SELinux. See Bug #576564.

The bug was fixed, but fix not yet in RHN.

Comment 12 Jonathan Blandford 2010-07-12 13:49:28 UTC
This was fixed and shipped, but accidentally left off the errata.  Moving to ON_QA for bookkeeping.

Comment 13 Marian Krcmarik 2011-04-12 16:08:09 UTC
The bug doesn't appear in latest spice-xpi.el5 and was already shipped. Moving to Verified.

Comment 15 errata-xmlrpc 2012-02-21 05:17:58 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0316.html


Note You need to log in before you can comment on or make changes to this bug.