Description of problem: Tried to play the Facebook game called "SpotIt!" on Firefox. It happens everytime. Version-Release number of selected component: xulrunner-18.0-6.fc18 Additional info: backtrace_rating: 3 cmdline: /usr/lib64/xulrunner/plugin-container /usr/lib64/flash-plugin/libflashplayer.so -greomni /usr/lib64/xulrunner/omni.ja -appomni /usr/lib64/firefox/omni.ja 2116 true plugin crash_function: mozalloc_abort executable: /usr/lib64/xulrunner/plugin-container kernel: 3.7.2-204.fc18.x86_64 remote_result: 695948 uid: 1000 Truncated backtrace: Thread no. 1 (10 frames) #0 mozalloc_abort at /usr/src/debug/xulrunner-18.0/mozilla-release/memory/mozalloc/mozalloc_abort.cpp:23 #1 Abort at /usr/src/debug/xulrunner-18.0/mozilla-release/xpcom/base/nsDebugImpl.cpp:423 #2 NS_DebugBreak_P at /usr/src/debug/xulrunner-18.0/mozilla-release/xpcom/base/nsDebugImpl.cpp:410 #3 X11Error at /usr/src/debug/xulrunner-18.0/mozilla-release/toolkit/xre/nsX11ErrorHandler.cpp:157 #5 handle_error at xcb_io.c:212 #6 handle_response at xcb_io.c:324 #7 _XEventsQueued at xcb_io.c:363 #8 XPending at Pending.c:55 #9 gdk_check_xpending at gdkevents-x11.c:159 #10 gdk_event_prepare at gdkevents-x11.c:2361 Potential duplicate: bug 711839
Created attachment 687547 [details] File: backtrace
Created attachment 687548 [details] File: cgroup
Created attachment 687549 [details] File: core_backtrace
Created attachment 687550 [details] File: dso_list
Created attachment 687551 [details] File: environ
Created attachment 687552 [details] File: limits
Created attachment 687553 [details] File: maps
Created attachment 687554 [details] File: open_fds
Created attachment 687555 [details] File: proc_pid_status
Created attachment 687556 [details] File: var_log_messages
This is an automated bug processing. If you can reproduce the reported bug, please reopen it and assign directly to me (stransky). Thanks!
It actually still happens on Firefox with xulrunner, I don't have the issue with Chrome browser and it's "PeppperFlash" native plugin. URL of the game: http://apps.facebook.com/spot-it/
Sorry Martin I can not edit the bug assignee myself, it's locked on Gecko Maintainer.
This is an automated bug update. If you can reproduce the crash (do you have a reproduction steps, the crash occurs reliably), please reopen the bug. Thanks!
The reproduction steps are quite easy: 1) Open firefox browser (my version: firefox.x86_64 19.0.2-1.fc18) 2) Visit this URL http://apps.facebook.com/spot-it/ (facebook account needed) 3) The flash app loads up to 50% 4) xulrunner gets killed by SIGNAL 11 (my version: xulrunner.x86_64 19.0.2-1.fc18) 5) Adobe Flash plugin gets killed (my version: flash-plugin.x86_64 11.2.202.275-release) This is definitely a xulrunner issue. The app itself seems fine, no crash happens on IE9/10 (Win7/8), Chrome (Linux, Win7/8, OSX) not Firefox 19 for Win & OSX.
This one is hard to reproduce if you do not have a VMware vSphere environment, but it also happens in vSphere 5.1 web client (it's a Flash interface) whenever you try to download a file from a datastore. SELinux is off on my machineby the way.
It says ABORT: X_ChangeWindowAttributes: BadWindow (invalid Window parameter), looks like a bad combination of a flash-plugin and the VMware vSphere environmet. Can you reproduce it with an upstream binary firefox, downloaded from mozilla.com?
Martin, I have just tried the upstream 19.0.2.x86_64 version of Firefox as you suggested, and the same thing happened with both vSphere client and Spot It! Facebook game. I have submitted crash reports for both of them.
For Spot It! game, the error message is: ###!!! ABORT: X_ChangeWindowAttributes: BadWindow (invalid Window parameter): file /builds/slave/rel-m-rel-l64_bld-000000000000/build/toolkit/xre/nsX11ErrorHandler.cpp, line 157 For vSphere the message is different: 2013-03-18 17:15:27.874 [/build/mts/release/bora-774810/bora/apps/vmplayer/plugin-common/settings.cpp:100]: Using settings file "/home/cotten/.vmrc-plugin-settings.js" 2013-03-18 17:15:33.857 [/build/mts/release/bora-774810/bora/apps/vmplayer/npplugin/common/ScriptableObject.cc:315]: Failed to get the plugin's NPObject: 9 2013-03-18 17:15:33.857 [/build/mts/release/bora-774810/bora/apps/vmplayer/npplugin/common/VmrcPlugin.cc:2624]: Failed to call onProcessNotification I should maybe open a new bug, but for both of them Xulrunner receives a SIGNAL 11 and a message similar to this shows up in my audit.log: type=ANOM_ABEND msg=audit(1363623581.875:560): auid=1000 uid=1000 gid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=4520 comm="plugin-containe" reason="memory violation" sig=11
The selinux message looks like a bug in flash player. I'm afraid we can't fix crashes in flash, it's a closed source software.