Bug 591856 – www-client/firefox-45.3.0 and 45.2.0 killed by PAX right after starting on empty profile

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Fedja Beader 2016-08-22 12:22:26 UTC]

Killed on empty/new profile (tested by mv ~/.mozilla/firefox ~/.mozilla/ff and mv ~/.cache/mozilla/firefox ~/.cache/mozilla/ff)

Killed on firefox --ProfileManager (the profile manager briefly flashes, but is blank)

Not killed on firefox --safe-mode
Not killed after paxctl -m /usr/bin/firefox

Terminal output:
ATTENTION: default value of option force_s3tc_enable overridden by environment.
Killed


strace -f -t firefox output:

8558  15:52:55 clone(child_stack=0x32706c0ffb0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x32706c109d0, tls=0x32706c10700, child_tidptr=0x32706c109d0) = 8564
... other PIDs
8564  15:52:55 set_robust_list(0x32706c109e0, 24) = 0
8564  15:52:55 gettid()                 = 8564
8564  15:52:55 getpriority(PRIO_PROCESS, 0) = 20
8564  15:52:55 setpriority(PRIO_PROCESS, 8564, 0) = 0
8564  15:52:55 prctl(PR_SET_NAME, 0x32703047d7e, 0x8000, 0xd7e, 0x32706cf8908) = 0
8564  15:52:55 futex(0x326f558624c, FUTEX_WAIT_PRIVATE, 1, NULL <unfinished ...>
... other PIDs
8589  15:52:59 futex(0x326e6f80c0c, FUTEX_WAIT_BITSET_PRIVATE, 1, {126634, 127022402}, ffffffff <unfinished ...>
8558  15:52:59 stat("/etc/localtime",  <unfinished ...>
8564  15:52:59 +++ killed by SIGKILL +++
+ ~40 SIGKILLed


[126634.112995] PAX: execution attempt in: <anonymous mapping>, 326f5632000-326f56b2000 326f5632000
[126634.113006] PAX: terminating task: /usr/lib64/firefox/firefox(Compositor):3860, uid/euid: 75498472/75498472, PC: 00000326f56320c0, SP: 00000326e990d758
[126634.113012] PAX: bytes at PC: 55 48 89 e5 41 57 41 56 41 54 53 48 81 ec d0 00 00 00 49 89
[126634.113035] PAX: bytes at SP-8: 00000326e990d770 00000326de30596e 00000326dabf70e8 0000000000000000 0000000000000000 0000000000000000 00000326e990d7a0 00000326de256af5 00000326e990d8b0 0000004400000006 00000326d85dac00
[126634.113532] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib64/firefox/firefox[Compositor:3860] uid/euid:75498472/75498472 gid/egid:75498472/75498472, parent /usr/bin/strace[strace:3829] uid/euid:75498472/75498472 gid/egid:75498472/75498472


Build settings:
www-client/firefox-45.3.0::gentoo was built with the following:
USE="bindist ffmpeg gstreamer hardened hwaccel jemalloc3 -custom-cflags -custom-optimization -dbus -debug (-gmp-autoupdate) -gstreamer-0 -jit (-neon) (-pgo) -pulseaudio (-selinu
x) -startup-notification (-system-cairo) -system-harfbuzz -system-icu -system-jpeg -system-libevent -system-libvpx -system-sqlite -test -wifi" ABI_X86="64" L10N="-ach -af -an -a
r -as -ast -az -be -bg -bn-BD -bn-IN -br -bs -ca -cs -cy -da -de -el -en-GB -en-ZA -eo -es-AR -es-CL -es-ES -es-MX -et -eu -fa -fi -fr -fy -ga -gd -gl -gu -he -hi -hr -hsb -hu -
hy -id -is -it -ja -kk -km -kn -ko -lt -lv -mai -mk -ml -mr -ms -nb -nl -nn -or -pa -pl -pt-BR -pt-PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv -ta -te -th -tr -uk -uz -vi -xh -z
h-CN -zh-TW"
CFLAGS="-pipe -fno-stack-protector -march=core2"
CXXFLAGS="-pipe -fno-stack-protector -march=core2"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-rpath=/usr/lib64/firefox,--enable-new-dtags -Wl,-z,relro,-z,now"



Hmm, what is fno-stack-protector doing there..
I will try rebuilding with hwaccel off: the S3TC output was not present on firefox 38 ESR (which works fine) and (Compositor) in dmesg suggest it may be the hwaccel.

[Comment 1 Fedja Beader 2016-08-22 15:58:45 UTC]

USE=-hwaccel = working firefox 45.3!

[Comment 2 Jory A. Pratt 2016-11-03 23:32:32 UTC]

Has already been addressed in 45.4.0 thanks for reporting.