Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 593452 - >=www-client/chromium-54 -suid causes segfault on start
Summary: >=www-client/chromium-54 -suid causes segfault on start
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Chromium Project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-09-10 16:44 UTC by Nick
Modified: 2016-09-16 15:41 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nick 2016-09-10 16:44:26 UTC
With the following use flags for chromium-54 and 55 I get a segfault when trying to run it.

www-client/chromium-55.0.2853.0::gentoo  USE="cups (gn) gnome gnome-keyring hangouts (pic) proprietary-codecs pulseaudio system-ffmpeg tcmalloc -custom-cflags (-gtk3) -kerberos (-neon) (-selinux) -suid {-test} -widevine" L10N="am ar bg bn ca cs da de el en-GB es es-419 et fa fi fil fr gu he hi hr hu id it ja kn ko lt lv ml mr ms nb nl pl pt-BR pt-PT ro ru sk sl sr sv sw ta te th tr uk vi zh-CN zh-TW"

Portage 2.3.0 (python 2.7.12-final-0, default/linux/amd64/13.0/desktop/gnome/systemd, gcc-4.9.3, glibc-2.23-r2, 4.7.3-gentoo x86_64)
=================================================================
System uname: Linux-4.7.3-gentoo-x86_64-Intel-R-_Core-TM-_i7-2675QM_CPU_@_2.20GHz-with-gentoo-2.2
KiB Mem:     8080724 total,   3254612 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Sat, 10 Sep 2016 00:45:02 +0000
sh bash 4.3_p42-r1
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
app-shells/bash:          4.3_p42-r1::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.12::gentoo, 3.4.4::gentoo, 3.5.2::gentoo
dev-util/cmake:           3.5.2-r1::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.21.3::gentoo
sys-apps/sandbox:         2.10-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.11.6-r1::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25.1-r1::gentoo
sys-devel/gcc:            4.9.3::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers)
sys-libs/glibc:           2.23-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: webrsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000

nick
    location: /usr/local/portage
    masters: gentoo

gamerlay
    location: /var/lib/layman/gamerlay
    masters: gentoo
    priority: 50

java
    location: /var/lib/layman/java
    masters: gentoo
    priority: 50

jorgicio
    location: /var/lib/layman/jorgicio
    masters: gentoo
    priority: 50

laurentb
    location: /var/lib/layman/laurentb
    masters: gentoo
    priority: 50

sabayon
    location: /var/lib/layman/sabayon
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.6/ext-active/ /etc/php/apache2-php7.0/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cgi-php7.0/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/php/cli-php7.0/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync webrsync-gpg xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ http://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ http://distfiles.gentoo.org/"
LANG="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j8"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi alsa amd64 berkdb branding bzip2 cairo cdda cdr cli colord cracklib crypt cups cxx dbus dri dts dvd dvdr eds emboss encode evo exif fam ffmpeg firefox flac fortran gdbm gif glamor gnome gnome-keyring gnome-online-accounts gpm gstreamer gtk iconv introspection ipv6 jpeg lcms ldap libnotify libsecret mad mmx mmxext mng modules mp3 mp4 mpeg multilib nautilus ncurses nls nptl ogg opengl openmp pam pango pcre pdf php png policykit ppds pulseaudio qt3support qt4 readline sdl seccomp session spell sse sse2 ssl startup-notification svg systemd tcpd tiff tracker truetype udev udisks unicode upower usb vorbis wxwidgets x264 xattr xcb xml xv xvid zlib" ABI_X86="64 32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="synaptics evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python2_7 python3_5" PYTHON_TARGETS="python2_7 python3_5" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="fglrx intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Comment 1 Nick 2016-09-10 16:53:21 UTC
(gdb) r
Starting program: /usr/lib64/chromium-browser/chrome 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
[New Thread 0x7fffe4056700 (LWP 3290)]
[New Thread 0x7fffe3855700 (LWP 3298)]
[New Thread 0x7fffe1648700 (LWP 3299)]
[New Thread 0x7fffe0e47700 (LWP 3300)]
[New Thread 0x7fffe0646700 (LWP 3301)]
[New Thread 0x7fffdfe45700 (LWP 3302)]
[New Thread 0x7fffdf644700 (LWP 3303)]
[New Thread 0x7fffdee43700 (LWP 3304)]
[New Thread 0x7fffe1d71700 (LWP 3305)]
[New Thread 0x7fffde642700 (LWP 3306)]
[New Thread 0x7fffdde41700 (LWP 3307)]

Thread 9 "D-Bus thread" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffdee43700 (LWP 3304)]
0x0000555557a687fa in base::MessagePumpLibevent::OnLibeventNotification(int, short, void*) ()
Comment 2 Mike Gilbert gentoo-dev 2016-09-10 18:57:47 UTC
Since you already have gdb working, how about a backtrace?

Have you tested the same version(s) with USE=suid enabled?

What does the chrome://sandbox page show you?
Comment 3 Mike Gilbert gentoo-dev 2016-09-15 14:32:27 UTC
Do you still experience this problem with 54.0.2840.27 or 55.0.2859.0?
Comment 4 Nick Wallingford 2016-09-16 05:53:16 UTC
Do you have CONFIG_USER_NS=y in your kernel config?

-suid and CONFIG_USER_NS=n in kernel is a known not-working configuration for chromium; it crashes with a very similar message as the one you described. (read desc for the suid USE flag) I think the chromium ebuild should have a kernel config check (I don't know what the correct term is) during emerge otherwise we will continue to get reports similar to these.

I know chromium with -suid works on my system, but I have CONFIG_USER_NS=y. Just for shits and grins, I rebuilt my kernel with CONFIG_USER_NS=n and sure enough, chromium crashes on startup with a similar error message as the first responder's. I rebuilt the kernel with CONFIG_USER_NS=y and it works again.
Comment 5 Nick 2016-09-16 06:06:11 UTC
I do have CONFIG_USER_NS=y in my kernel config. USE=-suid didn't cause any problems for me in previous versions of chromium-54 (though back then +tcmalloc was not supported with +gn, and it was only when I compiled with +tcmalloc and -suid that the problem started occurring so maybe that could be the issue). I am currently compiling 55.0.2859.0 to see if it is fixed.

I remember a much older chromium version giving a warning if CONFIG_USER_NS wasn't set.
Comment 6 Nick 2016-09-16 15:41:21 UTC
The problem is fixed with =www-client/chromium-55.0.2859.0