Bug 570838 – [mozilla overlay] www-client/firefox-44.0_beta4 crashes on musl-amd64 with Assertion failure: Could not find EV root in NSS storage

• Status: RESOLVED UPSTREAM
• Product: Gentoo Linux

[Description tt_1 2016-01-04 13:11:03 UTC]

Created attachment 421866 [details]
output of emerge --info

I used latest firefox-44.0-patches-0.3 tarball for patching, emerge --info is attached 

output of emerge -pv firefox 

[ebuild   R   ~] www-client/firefox-44.0_beta4::mozilla  USE="dbus debug gstreamer hwaccel jemalloc3 jit minimal system-cairo system-icu system-jpeg system-libevent system-libvpx system-sqlite -bindist -custom-cflags -custom-optimization -egl -gmp-autoupdate -gstreamer-0 -gtk3 (-hardened) (-neon) (-pgo) -pulseaudio (-selinux) -startup-notification {-test} -wifi" 0 KiB

Total: 1 package (1 reinstall), Size of downloads: 0 KiB

[Comment 1 tt_1 2016-01-04 13:19:57 UTC]

Created attachment 421886 [details]
backtrace

This happens when starting the browser without any kind of user interaction.

[Comment 2 Felix Janda 2016-01-05 15:18:37 UTC]

Does 'firefox --safe-mode' also crash?

[Comment 3 tt_1 2016-01-05 17:13:17 UTC]

Created attachment 422032 [details]
backtrace

Yes it does, unfortunatly. It's the same crash, 100% reproduceable.

[Comment 4 tt_1 2016-01-05 22:21:28 UTC]

I think this is about dev-libs/nss. 

Firefox 44 needs actually nss-3.21 at least, but for some very strange reason the use of a nss system version lower than that does not lead to a failure in the configuration! 

There are some important changes in the ca-certificates if I got it correct, and the lack of these changes is detected by firefox BUT only in debug mode does it lead to crashes. 

see as well https://bugzilla.mozilla.org/show_bug.cgi?id=1211568

So please adjust RDEPEND to >=dev-libs/nss-3.21 in the ebuild. And eventually open an upstream bug about the missing configure check.

[Comment 5 tt_1 2016-01-06 19:50:58 UTC]

The missing check for nss-3.21 is fixed upstream in beta6, so I'm closing here.

[Comment 6 tt_1 2016-01-06 20:29:25 UTC]

(In reply to tt_1 from comment #5)
> The missing check for nss-3.21 is fixed upstream in beta6, so I'm closing
> here.

ehr, I'm sorry, flipped a line. Isn't fixed yet upstream.

[Comment 7 tt_1 2016-01-06 20:32:52 UTC]

Created attachment 422152 [details, diff]
fix nss check

tried to solve the problem, is this acceptable for the overlay @Jory?

[Comment 8 Jory A. Pratt 2016-01-07 00:17:47 UTC]

(In reply to tt_1 from comment #7)
> Created attachment 422152 [details, diff] [details, diff]
> fix nss check
> 
> tried to solve the problem, is this acceptable for the overlay @Jory?

Well this is acceptable, I prefer to just up the dep via the overlay and not worry about it as it will end up bumped by beta9

[Comment 9 tt_1 2016-01-27 16:49:10 UTC]

@Jory , please fix the ebuild in the mozilla overlay to demand at least nss-3.21 for firefox 44.0. Upstream hasn't fixed this yet.

[Comment 10 tt_1 2016-02-14 13:37:47 UTC]

fixed by upstream in 44.0.1