Bug 542568 – www-client/firefox-36.0.1 segfaults when certain web pages are focused

• Product: Gentoo Linux
• Status: RESOLVED OBSOLETE

[Description James Dominy 2015-03-08 14:27:39 UTC]

When I focus certain website, i.e. actually view the tab they are loaded in (if they loaded in the background) firefox crashes. If I find a url that causes a crash then that url crashes consistently, but I cannot see a connection between the urls. The crash can happen when viewing a pdf with firefox's internal PDF viewer (no web plugins at all), on explosm.net (static images, no video), the jolla shop (embedded video), some sites on the wayback machine. I have tested in a new profile, and attach the console output, and an strace up to the segfault.

Reproducible: Always

Steps to Reproduce:
1. $ firefox -ProfileManager (create a new profile and start with it)
2. Visit http://shop.jolla.com
Actual Results:  
Firefox segfaults as the page starts rendering

Expected Results:  
No segfault

Portage 2.2.18 (python 2.7.9-final-0, default/linux/amd64/13.0, gcc-4.9.2, glibc-2.20-r2, 3.19.0-gentoo x86_64)
=================================================================
System uname: Linux-3.19.0-gentoo-x86_64-Intel-R-_Core-TM-_i5-3210M_CPU_@_2.50GHz-with-gentoo-2.2
KiB Mem:     8068436 total,   1435716 free
KiB Swap:    8912892 total,   8912636 free
Timestamp of repository gentoo: Sun, 08 Mar 2015 08:30:01 +0000
sh bash 4.3_p33-r2
ld GNU ld (Gentoo 2.25 p1.0) 2.25
app-shells/bash:          4.3_p33-r2::gentoo
dev-java/java-config:     2.2.0::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.9-r2::gentoo, 3.4.3::gentoo
dev-util/cmake:           3.0.2::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.13.11::gentoo
sys-apps/sandbox:         2.6-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.11.6-r1::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25::gentoo
sys-devel/gcc:            4.9.2::gentoo
sys-devel/gcc-config:     1.8::gentoo
sys-devel/libtool:        2.4.6::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 3.19::gentoo (virtual/os-headers)
sys-libs/glibc:           2.20-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000

x-portage
    location: /usr/local/portage
    masters: gentoo
    priority: 0

qt
    location: /var/lib/layman/qt
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=core-avx-i -O2 -pipe -fomit-frame-pointer"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=core-avx-i -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--quiet-build"
FCFLAGS="-march=core-avx-i -O2 -pipe -fomit-frame-pointer"
FEATURES="assume-digests binpkg-logs cgroup clean-logs config-protect-if-modified distlocks ebuild-locks fail-clean fixlafiles merge-sync news parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms split-elog split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-march=core-avx-i -O2 -pipe -fomit-frame-pointer"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LANG="en_ZA.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi adns alsa amd64 ao apache2 avahi berkdb bidi bluetooth bzip2 cairo caps cdda cddb cdio cdparanoia cdr cjk cli consolekit cracklib crypt cscope css cups curl cvs cxx dbus dhcp directfb djvu dri drm dts dv dvd emotion encode ethumb exif fam fftw filecaps flac fortran ftp gd gdbm geoip ggi gif git gnome-keyring gnutls gpg gpm gtk3 gtkstyle gzip iconv icu idn inotify introspection ipv6 javascript jbig jit jpeg kerberos lame lapack latex ldap libass libnotify libsamplerate lzma mmap mms mmx modemmanager modules mp3 mp4 mpeg mysql ncurses network networkmanager nls nptl nsplugin ogg openal opengl openmp pam pcre pdf png policykit postgres postscript ppds python qt3support qt5 quicktime raw readline samba session slang smp sna sound spell sqlite sqlite3 sse sse2 ssh ssl startup-notification subversion svg syslog taglib tcpd theora threads tiff truetype udev unicode usb uxa v4l vaapi vcd vdpau vim-syntax vorbis vpx wifi wmf x264 xattr xcb xcomposite xetex xinerama xinetd xscreensaver xv xvid xvmc zeroconf zlib" ABI_X86="32 64" ALSA_CARDS="seq-dummy intel-hda-snd" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_ZA en_GB en_US" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
USE_PYTHON="2.7"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 James Dominy 2015-03-08 14:33:29 UTC]

Created attachment 398396 [details]
strace of run with new profile

[Comment 2 James Dominy 2015-03-08 14:38:40 UTC]

Created attachment 398398 [details]
console output

[Comment 3 Andrew Savchenko 2015-03-09 19:06:05 UTC]

Please provide a backtrace as described here:
https://wiki.gentoo.org/wiki/Bugzilla_HOWTO
(You will need to rebuild firefox with debug information and run it withing gdb.)

[Comment 4 Jory A. Pratt 2015-03-10 01:32:05 UTC]

You need to run with firefox --safe-mode before you do anything else. It could be nothing more then an extension/plugin causing you all the headaches.

[Comment 5 James Dominy 2015-03-10 08:37:04 UTC]

@Andrew: I will recompile and upload debug output tonight.

[Comment 6 James Dominy 2015-03-10 08:39:58 UTC]

@Jory: No difference in behaviour in safe mode, I'm adding the strace and console output for the safe mode runs. These were produced by running

$ firefox -safe-mode -ProfileManager &> /tmp/console.txt

and

$ strace firefox -safe-mode -ProfileManager &> /tmp/strace.txt

respectively. I created a new profile for the first run (console), and reused that profile for the second run.

[Comment 7 James Dominy 2015-03-10 08:41:00 UTC]

Created attachment 398572 [details]
console output from safe mode

[Comment 8 James Dominy 2015-03-10 08:41:56 UTC]

Created attachment 398574 [details]
strace output from safe mode

[Comment 9 Jory A. Pratt 2015-03-11 12:59:37 UTC]

(In reply to James Dominy from comment #6)
> @Jory: No difference in behaviour in safe mode, I'm adding the strace and
> console output for the safe mode runs. These were produced by running
> 
> $ firefox -safe-mode -ProfileManager &> /tmp/console.txt
> 
> and
> 
> $ strace firefox -safe-mode -ProfileManager &> /tmp/strace.txt
> 
> respectively. I created a new profile for the first run (console), and
> reused that profile for the second run.

your straces command is wrong, use strace -f so we can see the child processes please. If you would please email me the log to [e-mail] so I can view it while out of town.

[Comment 10 James Dominy 2015-03-15 08:06:15 UTC]

Created attachment 398958 [details]
strace -f output of new run in safe mode

[Comment 11 James Dominy 2015-03-16 08:50:06 UTC]

Created attachment 399014 [details]
Backtrace when firefox segfaults

Firefo was recompiled using 

CFLAGS="-march=core-avx-i -O2 -pipe -fomit-frame-pointer -ggdb" FEATURES="nostrip" USE="debug" PORTAGE_TMPDIR="/home/sirlark/" emerge -av firefox

[Comment 12 Ian Stakenvicius (RETIRED) 2015-07-06 20:06:18 UTC]

Does this problem persist in newer versions?

[Comment 13 James Dominy 2015-07-07 09:52:20 UTC]

Yes :(

[Comment 14 Jory A. Pratt 2017-08-26 17:56:11 UTC]

If you feel I have closed your bug and it is still a current issue, please reopen and update it completely. We will not work bugs that have no ebuild in tree any longer or can not be reproduced with a current system.

Thank You for your support and understanding
The Mozilla Team