Seen on crash-stats. This user has likely force-enabled VAAPI. Crash report: https://crash-stats.mozilla.org/report/index/683346c3-d1e3-4e00-b8e3-772760230427 Reason: ```SIGSYS / SYS_SECCOMP``` Top 10 frames of crashing thread: ``` 0 libc.so.6 __socket /usr/src/debug/glibc/glibc/sysdeps/unix/syscall-template.S:120 1 libxcb.so.1 _xcb_socket /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:317 2 libxcb.so.1 _xcb_open_abstract /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:480 2 libxcb.so.1 _xcb_open /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:291 2 libxcb.so.1 xcb_connect_to_display_with_auth_info /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:519 3 libX11.so.6 _XConnectXCB /usr/src/debug/libx11/libX11-1.8.4/src/xcb_disp.c:78 4 libX11.so.6 XOpenDisplay /usr/src/debug/libx11/libX11-1.8.4/src/OpenDis.c:129 5 libva-drm.so.2 <.text ELF section in libva-drm.so.2.1800.0> 6 libva.so.2 vaInitialize 7 libxul.so libxul.so@0x78591cb ``` It might be coming from here: https://github.com/intel/libva/blob/0fc018aff4cca3fb75543ed5e84b90d0f379e462/va/drm/va_drm.c#L57-L65 ``` /* Authentication is only needed for a legacy DRM device */ if (ctx->display_type != VA_DISPLAY_DRM_RENDERNODES) { ret = drmGetMagic(drm_state->fd, &magic); if (ret < 0) return VA_STATUS_ERROR_OPERATION_FAILED; if (!va_drm_authenticate(drm_state->fd, magic)) return VA_STATUS_ERROR_OPERATION_FAILED; } ``` [va_drm_authenticate](https://github.com/intel/libva/blob/4bb5f16c57b059976110db350d771a0ba72b7ef1/va/drm/va_drm_auth.c#L33) calls [va_drm_authenticate_x11](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L128-L145) which calls [drm_auth_x11_init](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L74) which calls [XOpenDisplay](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L102).
Bug 1830300 Comment 0 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Seen on crash-stats. This user has likely force-enabled VAAPI. Crash report: https://crash-stats.mozilla.org/report/index/683346c3-d1e3-4e00-b8e3-772760230427 Reason: ```SIGSYS / SYS_SECCOMP``` Top 10 frames of crashing thread: ``` 0 libc.so.6 __socket /usr/src/debug/glibc/glibc/sysdeps/unix/syscall-template.S:120 1 libxcb.so.1 _xcb_socket /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:317 2 libxcb.so.1 _xcb_open_abstract /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:480 2 libxcb.so.1 _xcb_open /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:291 2 libxcb.so.1 xcb_connect_to_display_with_auth_info /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:519 3 libX11.so.6 _XConnectXCB /usr/src/debug/libx11/libX11-1.8.4/src/xcb_disp.c:78 4 libX11.so.6 XOpenDisplay /usr/src/debug/libx11/libX11-1.8.4/src/OpenDis.c:129 5 libva-drm.so.2 <.text ELF section in libva-drm.so.2.1800.0> 6 libva.so.2 vaInitialize 7 libxul.so libxul.so@0x78591cb ``` It might be coming from here: https://github.com/intel/libva/blob/0fc018aff4cca3fb75543ed5e84b90d0f379e462/va/drm/va_drm.c#L57-L65 ``` /* Authentication is only needed for a legacy DRM device */ if (ctx->display_type != VA_DISPLAY_DRM_RENDERNODES) { ret = drmGetMagic(drm_state->fd, &magic); if (ret < 0) return VA_STATUS_ERROR_OPERATION_FAILED; if (!va_drm_authenticate(drm_state->fd, magic)) return VA_STATUS_ERROR_OPERATION_FAILED; } ``` [va_drm_authenticate](https://github.com/intel/libva/blob/4bb5f16c57b059976110db350d771a0ba72b7ef1/va/drm/va_drm_auth.c#L33) calls [va_drm_authenticate_x11](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L128-L145) which calls [drm_auth_x11_init](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L74) which calls [XOpenDisplay](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L102). Edit: (Jed Davis [:jld] from bug 1748460 comment 1) > [...] I really don't want to allow sockets if there's any way to avoid it [...] Force-enabling hardware decoding could be blocked for deprecated X11 on proprietary Nvidia drivers. bug 1748460 could focus on Wayland. Or it could be wontfixed and we wait for Vulkan video decode APIs (but vp8+[vp9+av1 are still missing](https://www.phoronix.com/news/VP9-AV1-Vulkan-2023)). At the moment, those few users run into crashes until they set [MOZ_DISABLE_RDD_SANDBOX=1](https://github.com/elFarto/nvidia-vaapi-driver).
Seen on crash-stats. This user has likely force-enabled VAAPI. Crash report: https://crash-stats.mozilla.org/report/index/683346c3-d1e3-4e00-b8e3-772760230427 Reason: ```SIGSYS / SYS_SECCOMP``` Top 10 frames of crashing thread: ``` 0 libc.so.6 __socket /usr/src/debug/glibc/glibc/sysdeps/unix/syscall-template.S:120 1 libxcb.so.1 _xcb_socket /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:317 2 libxcb.so.1 _xcb_open_abstract /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:480 2 libxcb.so.1 _xcb_open /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:291 2 libxcb.so.1 xcb_connect_to_display_with_auth_info /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:519 3 libX11.so.6 _XConnectXCB /usr/src/debug/libx11/libX11-1.8.4/src/xcb_disp.c:78 4 libX11.so.6 XOpenDisplay /usr/src/debug/libx11/libX11-1.8.4/src/OpenDis.c:129 5 libva-drm.so.2 <.text ELF section in libva-drm.so.2.1800.0> 6 libva.so.2 vaInitialize 7 libxul.so libxul.so@0x78591cb ``` It might be coming from here: https://github.com/intel/libva/blob/0fc018aff4cca3fb75543ed5e84b90d0f379e462/va/drm/va_drm.c#L57-L65 ``` /* Authentication is only needed for a legacy DRM device */ if (ctx->display_type != VA_DISPLAY_DRM_RENDERNODES) { ret = drmGetMagic(drm_state->fd, &magic); if (ret < 0) return VA_STATUS_ERROR_OPERATION_FAILED; if (!va_drm_authenticate(drm_state->fd, magic)) return VA_STATUS_ERROR_OPERATION_FAILED; } ``` [va_drm_authenticate](https://github.com/intel/libva/blob/4bb5f16c57b059976110db350d771a0ba72b7ef1/va/drm/va_drm_auth.c#L33) calls [va_drm_authenticate_x11](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L128-L145) which calls [drm_auth_x11_init](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L74) which calls [XOpenDisplay](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L102). Edit: (Jed Davis [:jld] from bug 1748460 comment 1) > [...] I really don't want to allow sockets if there's any way to avoid it [...] IMHO: Force-enabling hardware decoding could be blocked for deprecated X11 on proprietary Nvidia drivers. bug 1748460 could focus on Wayland. Or it could be wontfixed and we wait for Vulkan video decode APIs (but vp8+[vp9+av1 are still missing](https://www.phoronix.com/news/VP9-AV1-Vulkan-2023)). At the moment, those few users run into crashes until they set [MOZ_DISABLE_RDD_SANDBOX=1](https://github.com/elFarto/nvidia-vaapi-driver).
Seen on crash-stats. This user has likely force-enabled VAAPI. Crash report: https://crash-stats.mozilla.org/report/index/683346c3-d1e3-4e00-b8e3-772760230427 Reason: ```SIGSYS / SYS_SECCOMP``` Top 10 frames of crashing thread: ``` 0 libc.so.6 __socket /usr/src/debug/glibc/glibc/sysdeps/unix/syscall-template.S:120 1 libxcb.so.1 _xcb_socket /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:317 2 libxcb.so.1 _xcb_open_abstract /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:480 2 libxcb.so.1 _xcb_open /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:291 2 libxcb.so.1 xcb_connect_to_display_with_auth_info /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:519 3 libX11.so.6 _XConnectXCB /usr/src/debug/libx11/libX11-1.8.4/src/xcb_disp.c:78 4 libX11.so.6 XOpenDisplay /usr/src/debug/libx11/libX11-1.8.4/src/OpenDis.c:129 5 libva-drm.so.2 <.text ELF section in libva-drm.so.2.1800.0> 6 libva.so.2 vaInitialize 7 libxul.so libxul.so@0x78591cb ``` It might be coming from here: https://github.com/intel/libva/blob/0fc018aff4cca3fb75543ed5e84b90d0f379e462/va/drm/va_drm.c#L57-L65 ``` /* Authentication is only needed for a legacy DRM device */ if (ctx->display_type != VA_DISPLAY_DRM_RENDERNODES) { ret = drmGetMagic(drm_state->fd, &magic); if (ret < 0) return VA_STATUS_ERROR_OPERATION_FAILED; if (!va_drm_authenticate(drm_state->fd, magic)) return VA_STATUS_ERROR_OPERATION_FAILED; } ``` [va_drm_authenticate](https://github.com/intel/libva/blob/4bb5f16c57b059976110db350d771a0ba72b7ef1/va/drm/va_drm_auth.c#L33) calls [va_drm_authenticate_x11](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L128-L145) which calls [drm_auth_x11_init](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L74) which calls [XOpenDisplay](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L102). --- Edit: (Jed Davis [:jld] from bug 1748460 comment 1) > [...] I really don't want to allow sockets if there's any way to avoid it [...] IMHO: Force-enabling hardware decoding could be blocked for deprecated X11 on proprietary Nvidia drivers. bug 1748460 could focus on Wayland. Or it could be wontfixed and we wait for Vulkan video decode APIs (but vp8+[vp9+av1 are still missing](https://www.phoronix.com/news/VP9-AV1-Vulkan-2023)). At the moment, those few users run into crashes until they set [MOZ_DISABLE_RDD_SANDBOX=1](https://github.com/elFarto/nvidia-vaapi-driver).
Seen on crash-stats. This user has likely force-enabled VAAPI. Crash report: https://crash-stats.mozilla.org/report/index/683346c3-d1e3-4e00-b8e3-772760230427 Reason: ```SIGSYS / SYS_SECCOMP``` Top 10 frames of crashing thread: ``` 0 libc.so.6 __socket /usr/src/debug/glibc/glibc/sysdeps/unix/syscall-template.S:120 1 libxcb.so.1 _xcb_socket /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:317 2 libxcb.so.1 _xcb_open_abstract /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:480 2 libxcb.so.1 _xcb_open /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:291 2 libxcb.so.1 xcb_connect_to_display_with_auth_info /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:519 3 libX11.so.6 _XConnectXCB /usr/src/debug/libx11/libX11-1.8.4/src/xcb_disp.c:78 4 libX11.so.6 XOpenDisplay /usr/src/debug/libx11/libX11-1.8.4/src/OpenDis.c:129 5 libva-drm.so.2 <.text ELF section in libva-drm.so.2.1800.0> 6 libva.so.2 vaInitialize 7 libxul.so libxul.so@0x78591cb ``` It might be coming from here: https://github.com/intel/libva/blob/0fc018aff4cca3fb75543ed5e84b90d0f379e462/va/drm/va_drm.c#L57-L65 ``` /* Authentication is only needed for a legacy DRM device */ if (ctx->display_type != VA_DISPLAY_DRM_RENDERNODES) { ret = drmGetMagic(drm_state->fd, &magic); if (ret < 0) return VA_STATUS_ERROR_OPERATION_FAILED; if (!va_drm_authenticate(drm_state->fd, magic)) return VA_STATUS_ERROR_OPERATION_FAILED; } ``` [va_drm_authenticate](https://github.com/intel/libva/blob/4bb5f16c57b059976110db350d771a0ba72b7ef1/va/drm/va_drm_auth.c#L33) calls [va_drm_authenticate_x11](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L128-L145) which calls [drm_auth_x11_init](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L74) which calls [XOpenDisplay](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L102). --- Edit: (Jed Davis [:jld] from bug 1748460 comment 1) > [...] I really don't want to allow sockets if there's any way to avoid it [...] IMHO: Force-enabling hardware decoding could be blocked for deprecated X11 on proprietary Nvidia drivers. bug 1748460 could focus on Wayland. Or it could be wontfixed and we wait for Vulkan video decode APIs (vp8+[vp9+av1 are still missing](https://www.phoronix.com/news/VP9-AV1-Vulkan-2023)). At the moment, those few users run into crashes until they set [MOZ_DISABLE_RDD_SANDBOX=1](https://github.com/elFarto/nvidia-vaapi-driver).
Seen on crash-stats. This user has likely force-enabled VAAPI. Crash report: https://crash-stats.mozilla.org/report/index/683346c3-d1e3-4e00-b8e3-772760230427 Reason: ```SIGSYS / SYS_SECCOMP``` Top 10 frames of crashing thread: ``` 0 libc.so.6 __socket /usr/src/debug/glibc/glibc/sysdeps/unix/syscall-template.S:120 1 libxcb.so.1 _xcb_socket /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:317 2 libxcb.so.1 _xcb_open_abstract /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:480 2 libxcb.so.1 _xcb_open /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:291 2 libxcb.so.1 xcb_connect_to_display_with_auth_info /usr/src/debug/libxcb/libxcb-1.15/src/xcb_util.c:519 3 libX11.so.6 _XConnectXCB /usr/src/debug/libx11/libX11-1.8.4/src/xcb_disp.c:78 4 libX11.so.6 XOpenDisplay /usr/src/debug/libx11/libX11-1.8.4/src/OpenDis.c:129 5 libva-drm.so.2 <.text ELF section in libva-drm.so.2.1800.0> 6 libva.so.2 vaInitialize 7 libxul.so libxul.so@0x78591cb ``` It might be coming from here: https://github.com/intel/libva/blob/0fc018aff4cca3fb75543ed5e84b90d0f379e462/va/drm/va_drm.c#L57-L65 ``` /* Authentication is only needed for a legacy DRM device */ if (ctx->display_type != VA_DISPLAY_DRM_RENDERNODES) { ret = drmGetMagic(drm_state->fd, &magic); if (ret < 0) return VA_STATUS_ERROR_OPERATION_FAILED; if (!va_drm_authenticate(drm_state->fd, magic)) return VA_STATUS_ERROR_OPERATION_FAILED; } ``` [va_drm_authenticate](https://github.com/intel/libva/blob/4bb5f16c57b059976110db350d771a0ba72b7ef1/va/drm/va_drm_auth.c#L33) calls [va_drm_authenticate_x11](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L128-L145) which calls [drm_auth_x11_init](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L74) which calls [XOpenDisplay](https://github.com/intel/libva/blob/2f39b9bb97db6499ae4c253cb5ef8ce790251b67/va/drm/va_drm_auth_x11.c#L102). --- Edit: (Jed Davis [:jld] from bug 1748460 comment 1) > [...] I really don't want to allow sockets if there's any way to avoid it [...] IMHO: Force-enabling hardware decoding could be blocked for deprecated X11 on proprietary Nvidia drivers. bug 1748460 could focus on Wayland. Or it could be wontfixed and we wait for Vulkan video decode APIs (vp8+[vp9+av1 are still missing](https://www.phoronix.com/news/VP9-AV1-Vulkan-2023)). At the moment, those few users run into crashes until they set [MOZ_DISABLE_RDD_SANDBOX=1](https://github.com/elFarto/nvidia-vaapi-driver) which is not recommended.