Closed
Bug 1285770
Opened 8 years ago
Closed 8 years ago
Seccomp sandbox violation: sys_fallocate called in content process of Firefox desktop
Categories
(Core :: Security: Process Sandboxing, defect)
Core
Security: Process Sandboxing
Tracking
()
RESOLVED
FIXED
mozilla50
| Tracking | Status | |
|---|---|---|
| firefox50 | --- | fixed |
People
(Reporter: tedd, Assigned: tedd)
References
Details
(Whiteboard: sblc1)
Crash Data
Attachments
(2 files)
|
3.97 KB,
text/plain
|
Details | |
|
844 bytes,
patch
|
gcp
:
review+
|
Details | Diff | Splinter Review |
Crash reports show that sys_fallocate is called from the content process: https://crash-stats.mozilla.com/search/?product=Firefox&reason=~SIGSYS&address=0x11d&_sort=-date&_facets=signature&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#crash-reports
|
||
Updated•8 years ago
|
Whiteboard: sblc1
|
||
Updated•8 years ago
|
Crash Signature: [@ libc-2.23.so@0xdf26f ] [@ libc-2.23.so@0xfba0f ] [@ libc-2.21.so@0xf80af ] [@ libc-2.19.so@0xe0840 ] [@ libc-2.22.so@0xe092f ] [@ libc-2.23.so@0xf7edf ] [@ libc-2.22.so@0xf765f ]
|
||
Comment 1•8 years ago
|
||
Just in case it helps, this happens consistently for me when printing to a file. Also, crash happens just after reaching a supposedly unreached code: [Child 8846] ###!!! ASSERTION: Deallocator for PPrintProgressDialogChild should not be called on nsPrintingProxy.: 'Not Reached' http://searchfox.org/mozilla-central/source/embedding/components/printingui/ipc/nsPrintingProxy.cpp#227
Just crashed trying to print a boarding pass to PDF.
|
|
||
Comment 3•8 years ago
|
||
Looks like we need to whitelist this at least until we have proper e10s-enabled printing on Linux.
|
Assignee | |
Comment 4•8 years ago
|
||
Try push: https://treeherder.mozilla.org/#/jobs?repo=try&revision=c020cee1bab7
Assignee: nobody → julian.r.hector
Status: NEW → ASSIGNED
Attachment #8774333 -
Flags: review?(gpascutto)
|
||
Updated•8 years ago
|
Attachment #8774333 -
Flags: review?(gpascutto) → review+
Pushed by cbook@mozilla.com: https://hg.mozilla.org/integration/mozilla-inbound/rev/7107f6c51542 Add sys_fallocate to seccomp whitelist. r=gcp
Keywords: checkin-needed
|
||
Comment 7•8 years ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/7107f6c51542
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
status-firefox50:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla50
You need to log in
before you can comment on or make changes to this bug.
Description
•