622696 - [abrt] firefox-4.0-0.5b7.fc15: incompatibility with libnotify (e.g., when download of largish file) [@ notify_notification_finalize]

Status: NEW

(Core :: Widget: Gtk, defect, P5)

Description

[Matěj Cepl]

Attachment: original backtrace

{downstream filed as https://bugzilla.redhat.com/show_bug.cgi?id=654628 with many more comments than this excerpt}

Original downstream report:
abrt version: 1.1.14
architecture: x86_64
Attached file: backtrace
cmdline: /usr/lib64/firefox-4/firefox -UILocale sv-SE
component: firefox
executable: /usr/lib64/firefox-4/firefox
kernel: 2.6.36-4.fc15.x86_64
package: firefox-4.0-0.5b7.fc15
reason: Process /usr/lib64/firefox-4/firefox was killed by signal 11 (SIGSEGV)
release: Fedora release 15 (Rawhide)
time: 1290086442
uid: 500

How to reproduce
-----
I had my firefx running with a couple of tabs. CHoosed from one of them to
download and open a PDF in evince.
When I was about to close evince, the computer became nearly non-responsive, I
could switch between windows, but the content did not draw. 
The three windows disappered (i.e. firefox main windows, downloads and evince)
and this bugreport appered.

-------------------------------------------------------------------------------
Then the log in order from the latest to earliest:

The same versions as previous poster, and this still crash.

How I currently reproduce:
1. Open my browser with a number of saved open tabs.
2. Go to one of the tabs which when I press a button offers me to save four
pretty small files to disk (it tells my browser that I want to save these
files, so my browser shows four save-to-disk dialogs).
3. Save all four files (using a default location, no file-chooser dialog), and
about half a second after I pressed "ok" in the last dialog: crash.
Hi Martin,

Sorry, but firefox 4.0.0.7b8.fc15.x86_64 (and xulrunner-2.0-0.12b8.fc15.x86_64)
is crashing for me. I downloaded Coin2-devel-2.5.0-9.fc15.i686.rpm from [1]


Martin Kho


[1] ftp://alviss.et.tudelft.nl/pub/fedora/linux/development/x86_64/os/Packages/
Unable to reproduce with new firefox (firefox-4.0-0.7b8.fc15), can you retest
please?
Package: firefox-4.0-0.6b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Downloaded Amazon downloader from Amazon.com
2.
3.
Package: firefox-4.0-0.6b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Ctrl+clicked on a link to open in a new window
2. Dialogue window to save link (.sh) to drive or run appeared
3. Clicked CANCEL and firefox crashed.
Package: firefox-4.0-0.6b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. not sure...
2.
3.
Created attachment 468162 [details]
another backtrace
Package: firefox-4.0-0.6b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
While browsing
xulrunner-2.0/mozilla-central/toolkit/system/gnome/nsAlertsIconListener.cpp:

nsresult
nsAlertsIconListener::ShowAlert(GdkPixbuf* aPixbuf)
{
...
  // Fedora 10 calls NotifyNotification "closed" signal handlers with a
  // different signature, so a marshaller is used instead of a C callback to
  // get the user_data (this) in a parseable format.  |closure| is created
  // with a floating reference, which gets sunk by g_signal_connect_closure().
  GClosure* closure = g_closure_new_simple(sizeof(GClosure), this);
  g_closure_set_marshal(closure, notify_closed_marshal);
  mClosureHandler = g_signal_connect_closure(mNotification, "closed", closure,
FALSE);
  gboolean result = notify_notification_show(mNotification, NULL);
...

(No evidence that this is it, but...)
Actually, after looking at couple of duplicates of this, it seems to me that
the root of all evil may lie in

#11 0x00007f93bc0f055d in notify_notification_finalize (object=0x7f93a549f840)
at notification.c:342
        obj = 0x7f93a549f840
        priv = 0x7f93a8103d60
        proxy = <value optimized out>

so that this could be some bad use (or incompatibility, I was told there were
some changes in API) of libnotify.
*** Bug 654920 has been marked as a duplicate of this bug. ***
*** Bug 662111 has been marked as a duplicate of this bug. ***
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. shutdown firefox
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Start firefox with a couple of tabs
2. download a couple of small files (torrents at ~10k)
3. About six download later firefox crashes


Comment
-----
I did only download a couple of small files. When I pressed the link to the
sixth the animation on the tab started rolling as it should, but then hang. A
couple of seconds of a non-responsive firefox later this crash happened.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1.Download file
2.FF crashed
3.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1.load firefox
2.close firefox
3.cant load the home page when i load firefox again
Hi,

Third observation is not correct, sorry.:-( After opening some more pdf's
Firefox started crashing.

Martin Kho
Hi,

And a third observation:

a. When I open a pdf [e.g. see 1] - in my case - in okular (KDE pdf viewer) the
file will be 'saved' in /tmp and Firefox doesn't crash. The pdf is directed to
okular.

b. When I save the same pdf file (in ~/Downloads) Firefox crashes.

Martin Kho


[1]
http://projects.ischool.washington.edu/mcdonald/courses/insc598_wi04/papers/wk04/Engestrom.ATIntro.pdf
Hi,

@adam: thanks for the info.

Further I made two observations:

1. I observed (after Daniel Walsh pointed me at it) that all downloaded files
were created with the context:

"unconfined_u:object_r:user_tmp_t:s0"

They have to be:
"unconfined_u:object_r:user_home_t:s0"
(at least this is what I get after running restorecon -R ~/)

2. Running Firefox as root, download a large file, it didn't crash. Btw. The
downloaded file also had the context "unconfined_u:object_r:user_tmp_t:s0".


May be these observations are relevant.

Martin Kho
martin: that doesn't necessarily prove anything, as the Fedora build is
somewhat different to upstream; there can be bugs in the Fedora build that
aren't in upstream. but we'll get b8 in Rawhide when it lands, of course.
(In reply to comment #22)
> Package: firefox-4.0-0.5b7.fc15
> Architecture: x86_64
> OS Release: Fedora release 15 (Rawhide)
> 
> 
> How to reproduce
> -----
> 1.I open firefox
> 2.after a variable time firefox crash
> 3.

Just one precision:
firefox crash when I download a file (on kde-look.org or on koji...)
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1.I open firefox
2.after a variable time firefox crash
3.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
it crashed during input korean,
Hi,

FYI: I've tried Firefox 8pre nightly build [1]. It doesn't crash after
downloading a large file.

Martin Kho 

[1] http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/
(In reply to comment #18)
> Package: firefox-4.0-0.5b7.fc15
> Architecture: x86_64
> OS Release: Fedora release 15 (Rawhide)
> 
> 
> How to reproduce
> -----
> 1.just browsing ... at this moment my active tab was on
> http://sourceforge.net/projects/supybot/, but I am not sure how much that
> matters, the crash seems to be somewhere in Gtk
> 2.
> 3.
> 
> 
> Comment
> -----
> There isn't a complete set of symbols in the backtrace, but I think the
> relevant thread should be covered.

Oh yes, I may be downloading supybot in the background.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1.just browsing ... at this moment my active tab was on
http://sourceforge.net/projects/supybot/, but I am not sure how much that
matters, the crash seems to be somewhere in Gtk
2.
3.


Comment
-----
There isn't a complete set of symbols in the backtrace, but I think the
relevant thread should be covered.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Go to websites with external videos
2. When videos load in external app (mplayer for example) firefox dies
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1.close X11 window after visiting bugzilla #653905  (refered by google search)
2.
3.
matej: abrt's own dupe detection seems to be doing a decent job, judging by the
amount of CCs.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Downloaded a file
2. Right Clicked on Downloaded file in Download window to access the download
directory
3.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Start firefox
2. Browse around in a couple of tabs
3. Close it and choose to save tabs


Comment
-----
This happends every time but abrt picks it up as a different crash every time,
so sorry if I have reported this before and does not just remember.
I have no idea, how to search for duplicates on this .. both names of functions
are so generic that I get hundreds of unrelated bugs.
Created attachment 463232 [details] [diff] [review]
Part of the thread where crash happened
(In reply to comment #9)
> 1.just browsing through rhn.redhat.com I am not aware of anything special

Actually, yes it could be it ... I was downloading 185M ISO image with RHEL-6.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1.just browsing through rhn.redhat.com I am not aware of anything special
2.
3.
Hi,

Now I tried with a some what bigger file [1] and yes it crashed ;-(

So it's an F15 Alpha blocker :-)

Martin Kho



[1]
ftp://alviss.et.tudelft.nl/pub/fedora/linux/development/rawhide/x86_64/os/Packages/389-admin-1.1.13-1.fc15.x86_64.rpm
(334 KB).
it's been crashing consistently every time I download a file for several days,
now, for me.
Hi,

@Adam: True Firefox downloaded the file correctly. But it also didn't crash
after 5 seconds. It didn't even after more than an hour :-)

I have no idea why or what 'cured' the crash for me.

Martin Kho
Proposing this as an F15 Alpha blocker:

"It must be possible to run the default web browser and a terminal application
from the default desktop environment. The web browser must be able to download
files, load extensions, and log into FAS"

okay, it can download files, but it shouldn't crash immediately afterwards.
Hi,

Just tried what I did in comment #2... but this time Firefox didn't crash, huh?
Today's updates installed.

Martin Kho

firefox-4.0-0.5b7.fc15.x86_64
xulrunner-2.0-0.6b7.fc15.x86_64
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Download a file
2. Wait
3.


Comment
-----
Firefox crashes 100% reproducibly every time I download a file. Download a
file, wait 5 seconds, it crashes.
Package: firefox-4.0-0.5b7.fc15
Architecture: x86_64
OS Release: Fedora release 15 (Rawhide)


How to reproduce
-----
1. Go to fedora nightly-composes logs [1].
2. Download a log file
3. Wait a second ... crash :-)

[1] http://alt.fedoraproject.org/pub/alt/nightly-composes/kde/logs/
Created attachment 461291 [details] [diff] [review]
File: backtrace
abrt version: 1.1.14
architecture: x86_64
Attached file: backtrace
cmdline: /usr/lib64/firefox-4/firefox -UILocale sv-SE
component: firefox
executable: /usr/lib64/firefox-4/firefox
kernel: 2.6.36-4.fc15.x86_64
package: firefox-4.0-0.5b7.fc15
reason: Process /usr/lib64/firefox-4/firefox was killed by signal 11 (SIGSEGV)
release: Fedora release 15 (Rawhide)
time: 1290086442
uid: 500

How to reproduce
-----
I had my firefx running with a couple of tabs. CHoosed from one of them to
download and open a PDF in evince.
When I was about to close evince, the computer became nearly non-responsive, I
could switch between windows, but the content did not draw. 
The three windows disappered (i.e. firefox main windows, downloads and evince)
and this bugreport appered.

Comment 1

[Matěj Cepl]

Attachment: another backtrace

Comment 2

[Bill Nottingham]

This is a libnotify bug - https://bugzilla.gnome.org/show_bug.cgi?id=633829.

Comment 3

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1552613