Bug 204980

Summary:	net-www/netscape-flash-9.0.115.0 causes www-client/mozilla-firefox-2.0.0.11 to seg fault on some sites
Product:	Gentoo Linux	Reporter:	Dave <dliana>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED NEEDINFO
Severity:	normal	CC:	gandalf42, ingmar, stian
Priority:	High
Version:	2007.0
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	backtrace.log emerge --info backtrace.log

Description Dave 2008-01-09 01:38:44 UTC

I have recompiled mozilla-firefox with the debug flag enabled and according to the docs here: http://www.gentoo.org/proj/en/qa/backtraces.xml

It looks like netscape-flash causes it to crash on some sites.  I've attached the backtrace.

Comment 1 Dave 2008-01-09 01:39:05 UTC

Created attachment 140513 [details]
backtrace.log

Comment 2 Dave 2008-01-09 01:39:54 UTC

Created attachment 140514 [details]
emerge --info

Comment 3 Jakub Moc (RETIRED) gentoo-dev

2008-01-09 08:00:23 UTC

Apart from the fact that we cannot fix flash at all, which sites?

Comment 4 Dave 2008-01-09 16:36:17 UTC

I've had it crash on such sites as Youtube and a for-pay site that I use (you need a subscription to access the part I have trouble with).

Comment 5 Stian Skjelstad 2008-01-10 14:11:03 UTC

CFLAGS=-g CXXFLAGS=-g FEATURES=splitdebug emerge www-client/mozilla-firefox


That should give a far better backtrace inside gdb :-)

Comment 6 Dave 2008-01-14 12:31:06 UTC

Created attachment 140921 [details]
backtrace.log

I compiled Firefox with what you suggested (similar to what I did)

I ran code listing 1.4 from here:
http://www.gentoo.org/proj/en/qa/backtraces.xml 

I got slightly more info this time.

Comment 7 Stian Skjelstad 2008-01-14 12:48:02 UTC

#6  0xaf9c0560 in ?? ()
#7  0xafa16020 in ?? ()
#8  0xb0bd2938 in ?? () from /opt/netscape/plugins/libflashplayer.so
#9  0xb0de30cd in ?? () from /opt/netscape/plugins/libflashplayer.so
#10 0xb0dfa4f2 in ?? () from /opt/netscape/plugins/libflashplayer.so

When I think about, I will guess that the stack has been trashed (buffer overflow), since the pointers at #6 and #7 is not mapped from a file (you can check if they are mapped at all by viewing /proc/<PID>/maps ). And if that is the case, then the crash happens inside the flashplugin which is closed sources and beyond what we can fix here.