If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Kernel Panic immediately after Clicking on a link in Thunderbird to launch a window in Firefox

RESOLVED INVALID

Status

()

Firefox
Untriaged
RESOLVED INVALID
3 years ago
2 years ago

People

(Reporter: douglas godfrey, Unassigned)

Tracking

({hang})

37 Branch
x86
Mac OS X
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

(Reporter)

Description

3 years ago
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:37.0) Gecko/20100101 Firefox/37.0
Build ID: 20150326190726

Steps to reproduce:

Kernel Panic immediately after Clicking on the following link in Thunderbird to launch a window in Firefox
<http://org.salsalabs.com/dia/track.jsp?v=2&c=9wkTpJoYcfTKJemXifhAEudME8BMtIih>
Firefox had just been updated to the latest version and restarted
Thunderbird 31.5.0
Firefox 37.0
OS X 10.6.8 build 10K549 with all fixes applied

1)  Thunderbird and Firefox already running
      [Thunderbird uptime greater than 1 week]
      [Firefox had just been updated to latest version (37.0) 1 minute before]
2)  Click on link in Thunderbird
3)  Firefox becomes foreground app
4)  Video artifacts visible in front-most Firefox window
      [4-5 lines of small yellow tint squares across front window] 
5)  1/10 second later, Kernel Panic
6)  On restart, System Log is flooded with error messages from Firefox

34 open Firefox windows
11 windows: KissAnime.com
11 windows: AnimeSharing.com
8   windows: WatchSeries.com
2   windows: IRS.gov
1   window:   IKEA.com
1   window:   Firefox Update release notes

Firefox Addons:
1)   about:addons-memory
2)   Adblock Plus 2.6.8
3)   Adblock Plus Pop-up Addon 0.9.2
4)   BetterPrivacy 1.6.8
5)   Certificate Patrol 2.0.14
6)   CipherFox 3.10.1
7)   Disable Anti-Adblock 3.1
8)   Disable clipboard manipulations 1.0.1
9)   Downloads Window 0.5.3
10) Element Hiding Helper for Adblock Plus 1.3.2
11) FEBE 8.6
12) Flash Video Downloader 7.2.0
13) FlashStopper 1.2.5
14) Ghostery 5.4.3
15) HTTPS-Everywhere 4.0.3
16) NoScript 2.6.9.20
17) Privacy Badger Firefox 0.2.5
18) Request Policy 0.5.28
19) Restartless Restart 9
20) RightToClick 2.9.5
21) Self-Destructing Cookies 0.4.7
22) SettingSanity 0.8.2
23) ShareMeNot 2.3.3
24) Show my Password 2.0


Actual results:


Interval Since Last Panic Report:  63469312 sec
Panics Since Last Report:          12
Anonymous UUID:                    B9916354-C922-4084-BC65-12775DB8BB19

Tue Mar 31 15:18:09 2015
panic(cpu 7 caller 0x2abf6a): Kernel trap at 0x00279ece, type 14=page fault, registers:
CR0: 0x80010033, CR2: 0xffd6d6ea, CR3: 0xb6775000, CR4: 0x00000660
EAX: 0x210f51bc, EBX: 0xffd6d6d6, ECX: 0x1687fb7c, EDX: 0x04063aa0
CR2: 0xffd6d6ea, EBP: 0x8e033c58, ESI: 0x01325000, EDI: 0x00000000
EFL: 0x00010282, EIP: 0x00279ece, CS:  0x00000008, DS:  0x02f30010
Error code: 0x00000000

Backtrace (CPU 7), Frame : Return Address (4 potential args on stack)
0x8e033a48 : 0x21b837 (0x5dd7fc 0x8e033a7c 0x223ce1 0x0) 
0x8e033a98 : 0x2abf6a (0x59e3d0 0x279ece 0xe 0x59e59a) 
0x8e033b78 : 0x2a1a78 (0x8e033b90 0x1cfe5d24 0x8e033c58 0x279ece) 
0x8e033b88 : 0x279ece (0xe 0x2320048 0x10 0x10) 
0x8e033c58 : 0x25bf04 (0x210f51bc 0x1325000 0x0 0x431e0a) 
0x8e033ce8 : 0x25e340 (0x2140e1ec 0x1000000 0x1 0x49b8444c) 
0x8e033db8 : 0x282c75 (0x2140e1ec 0x8e033de8 0x8e033de0 0x610337b4) 
0x8e033e08 : 0x242f05 (0x2140e1ec 0x610337ac 0x16432668 0x610337b4) 
0x8e033e58 : 0x21dbe5 (0x6103378c 0x1643263c 0x19e678 0x103) 
0x8e033e98 : 0x210a86 (0x61033700 0x0 0x60ceadc0 0x5fce0110) 
0x8e033ef8 : 0x216f84 (0x61033700 0x0 0x0 0x0) 
0x8e033f78 : 0x295c57 (0x16171488 0x0 0x0 0x0) 
0x8e033fc8 : 0x2a256d (0x16171484 0x0 0x10 0x0) 

BSD process name corresponding to current thread: firefox

Mac OS version:
10K549

Kernel version:
Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386
System model name: MacPro3,1 (Mac-F42C88C8)

System uptime in nanoseconds: 4850683473151975
unloaded kexts:
com.apple.filesystems.cd9660	1.4.1 (addr 0x8fb65000, size 0x36864) - last unloaded 4759466726565495
loaded kexts:
com.parallels.filesystems.prlufs	2010.12.28
xxx.qnation.PeerGuardian	1.1.11
com.parallels.kext.vnic	9.0 24251.1052177
com.parallels.kext.netbridge	9.0 24251.1052177
com.parallels.kext.hidhook	9.0 24251.1052177
com.parallels.kext.hypervisor	9.0 24251.1052177
com.parallels.kext.usbconnect	9.0 24251.1052177
com.makemkv.kext.daspi	1.5
at.obdev.nke.LittleSnitch	4052
com.highpoint-tech.kext.rr64xl	1.0.3
com.SiliconImage.driver.Si3124u	2.1.4
com.apple.filesystems.udf	2.1.1 - last loaded 4759318048669700
com.apple.nke.pptp	1.5
com.apple.filesystems.autofs	2.1.0
com.apple.driver.AppleHWSensor	1.9.3d0
com.apple.driver.AudioAUUC	1.57
com.apple.Dont_Steal_Mac_OS_X	7.0.0
com.apple.iokit.CHUDUtils	364
com.apple.driver.AppleUpstreamUserClient	3.5.7
com.apple.iokit.CHUDProf	366
com.apple.driver.AppleMCCSControl	1.0.20
com.apple.driver.AppleIntelPenrynProfile	17.1
com.apple.kext.ATIFramebuffer	6.3.6
com.apple.driver.AudioIPCDriver	1.1.6
com.apple.driver.AppleHDA	2.0.5f14
com.apple.ATIRadeonX3000	6.3.6
com.apple.driver.AppleIntel8254XEthernet	2.1.3b1
com.apple.driver.AppleMCEDriver	1.1.9
com.apple.driver.AirPortBrcm43224	428.42.4
com.apple.driver.ACPI_SMC_PlatformPlugin	4.7.0a1
com.apple.driver.AppleLPC	1.5.1
com.apple.iokit.SCSITaskUserClient	2.6.8
com.apple.driver.AppleRAID	4.0.6
com.apple.BootCache	31.1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib	1.0.0d1
com.apple.iokit.IOAHCIBlockStorage	1.6.4
com.apple.driver.AppleUSBHub	4.2.4
com.apple.driver.AppleFWOHCI	4.7.3
com.apple.driver.AppleAHCIPort	2.1.7
com.apple.driver.AppleIntelPIIXATA	2.5.1
com.apple.driver.AppleUSBEHCI	4.2.4
com.apple.driver.AppleEFINVRAM	1.4.0
com.apple.driver.AppleUSBUHCI	4.2.0
com.apple.driver.AppleACPIButtons	1.3.6
com.apple.driver.AppleRTC	1.3.1
com.apple.driver.AppleHPET	1.5
com.apple.driver.AppleSMBIOS	1.7
com.apple.driver.AppleACPIEC	1.3.6
com.apple.driver.AppleAPIC	1.4
com.apple.driver.AppleIntelCPUPowerManagementClient	142.6.0
com.apple.security.sandbox	1
com.apple.security.quarantine	0
com.apple.nke.applicationfirewall	2.1.14
com.apple.driver.AppleIntelCPUPowerManagement	142.6.0
com.apple.nke.ppp	1.5
com.apple.driver.AppleProfileReadCounterAction	17
com.apple.driver.AppleProfileTimestampAction	10
com.apple.driver.AppleProfileThreadInfoAction	14
com.apple.driver.AppleProfileRegisterStateAction	10
com.apple.driver.AppleProfileKEventAction	10
com.apple.driver.AppleProfileCallstackAction	20
com.apple.iokit.IOSurface	74.2
com.apple.iokit.IOBluetoothSerialManager	2.4.5f3
com.apple.iokit.IOSerialFamily	10.0.3
com.apple.iokit.CHUDKernLib	365
com.apple.driver.DspFuncLib	2.0.5f14
com.apple.iokit.IOAudioFamily	1.8.3fc2
com.apple.kext.OSvKernDSPLib	1.3
com.apple.iokit.IONDRVSupport	2.2.1
com.apple.iokit.IOFireWireIP	2.0.3
com.apple.iokit.AppleProfileFamily	41.4
com.apple.driver.AppleHDAController	2.0.5f14
com.apple.iokit.IOHDAFamily	2.0.5f14
com.apple.iokit.IO80211Family	320.1
com.apple.iokit.IONetworkingFamily	1.10
com.apple.driver.AppleSMC	3.1.0d5
com.apple.driver.IOPlatformPluginFamily	4.7.0a1
com.apple.kext.ATI5000Controller	6.3.6
com.apple.kext.ATISupport	6.3.6
com.apple.iokit.IOGraphicsFamily	2.2.1
com.apple.driver.CSRUSBBluetoothHCIController	2.4.5f3
com.apple.driver.AppleUSBBluetoothHCIController	2.4.5f3
com.apple.iokit.IOBluetoothFamily	2.4.5f3
com.apple.iokit.IOUSBHIDDriver	4.2.0
com.apple.driver.AppleUSBMergeNub	4.2.4
com.apple.iokit.IOSCSIBlockCommandsDevice	2.6.8
com.apple.iokit.IOUSBMassStorageClass	2.6.7
com.apple.driver.AppleUSBComposite	3.9.0
com.apple.iokit.IOSCSIMultimediaCommandsDevice	2.6.8
com.apple.iokit.IOBDStorageFamily	1.6
com.apple.iokit.IODVDStorageFamily	1.6
com.apple.iokit.IOCDStorageFamily	1.6.1
com.apple.iokit.IOAHCISerialATAPI	1.2.6
com.apple.driver.XsanFilter	402.1
com.apple.iokit.IOATAPIProtocolTransport	2.5.1
com.apple.iokit.IOFireWireFamily	4.2.6
com.apple.iokit.IOUSBUserClient	4.2.4
com.apple.iokit.IOSCSIParallelFamily	2.1.1
com.apple.iokit.IOSCSIArchitectureModelFamily	2.6.8
com.apple.iokit.IOAHCIFamily	2.0.6
com.apple.iokit.IOATAFamily	2.5.1
com.apple.iokit.IOUSBFamily	4.2.4
com.apple.driver.AppleEFIRuntime	1.4.0
com.apple.iokit.IOHIDFamily	1.6.6
com.apple.iokit.IOSMBusFamily	1.1
com.apple.security.TMSafetyNet	6
com.apple.kext.AppleMatch	1.0.0d1
com.apple.driver.DiskImages	289.1
com.apple.iokit.IOStorageFamily	1.6.3
com.apple.driver.AppleACPIPlatform	1.3.6
com.apple.iokit.IOPCIFamily	2.6.5
com.apple.iokit.IOACPIFamily	1.3.0
Model: MacPro3,1, BootROM MP31.006C.B05, 8 processors, Quad-Core Intel Xeon, 2.8 GHz, 16 GB, SMC 1.25f4
Graphics: ATI Radeon HD 5770, ATI Radeon HD 5770, PCIe, 1024 MB
Memory Module: global_name
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x88), Broadcom BCM43xx 1.0 (5.10.131.42.4)
Bluetooth: Version 2.4.5f3, 2 service, 12 devices, 1 incoming serial ports
Network Service: Ethernet 1, Ethernet, en0
Network Service: Ethernet 2, Ethernet, en1
PCI Card: pci1095,3124, sppci_othermassstorage, Slot-2@2,0,0
PCI Card: ATI Radeon HD 5770, sppci_displaycontroller, Slot-1
PCI Card: ATI Radeon HD 5770, ATY,HoolockParent, Slot-1
PCI Card: pci1b4b,9235, sppci_ahci, Slot-4
PCI Card: pci1103,645, sppci_raid, Slot-3
Serial ATA Device: HL-DT-ST BD-RE  BE12LU38
Serial ATA Device: WDC WD1002FAEX-00Z3A0, 931.51 GB
Serial ATA Device: WDC WD1002FAEX-00Z3A0, 931.51 GB
Serial ATA Device: WDC WD2003FZEX-00Z4SA0, 1.82 TB
Serial ATA Device: WDC WD2003FZEX-00Z4SA0, 1.82 TB
Serial ATA Device: OCZ-VECTOR150, 111.79 GB
Parallel ATA Device: PIONEER DVD-RW  DVR-104
SCSI Device: SCSI Target Device @ 0
SCSI Device: SCSI Target Device @ 1
SCSI Device: SCSI Target Device @ 2
SCSI Device: SCSI Target Device @ 3
SCSI Device: SCSI Target Device @ 4
SCSI Device: SCSI Target Device @ 0
SCSI Device: SCSI Target Device @ 1
SCSI Device: SCSI Target Device @ 2
SCSI Device: SCSI Target Device @ 3
SCSI Device: SCSI Target Device @ 4
SCSI Device: SCSI Target Device @ 5
SCSI Device: SCSI Target Device @ 6
SCSI Device: SCSI Target Device @ 7
SCSI Device: SCSI Target Device @ 8
SCSI Device: SCSI Target Device @ 9
SCSI Device: SCSI Target Device @ 16
USB Device: Hub, 0x0409  (NEC Corporation), 0x005a, 0xfd400000 / 4
USB Device: Hub, 0x0409  (NEC Corporation), 0x005a, 0xfd300000 / 3
USB Device: CP 1500C, 0x0764  (Cyber Power Systems, Inc.), 0x0501, 0xfd310000 / 5
USB Device: Mass Storage, 0x058f  (Alcor Micro, Corp.), 0x6387, 0xfd100000 / 2
USB Device: Generic USB Hub, 0x058f  (Alcor Micro, Corp.), 0x9254, 0x1d200000 / 2
USB Device: Griffin PowerMate, 0x077d, 0x0410, 0x1d220000 / 5
USB Device: Macally iKeySlim, 0x2222, 0x0013, 0x1d210000 / 4
USB Device: USB Optical Mouse, 0x192f  (Avago Technologies, Pte.), 0x0916, 0x1d230000 / 3
USB Device: Bluetooth USB Host Controller, 0x05ac  (Apple Inc.), 0x8206, 0x5d200000 / 2
FireWire Device: built-in_hub, Up to 800 Mb/sec



Expected results:

New Firefox window should have opened

Comment 1

3 years ago
While this probably isn't the reply you wanted, by definition anything that can cause a kernel panic is a bug in the kernel. Thank you for your report, but this needs to go to Apple; if you agreed to submit the crash report to Apple after you restarted, that's all we can do. 

Thank you.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → INVALID
(Reporter)

Comment 2

3 years ago
This Kernel Panic is different because it is caused by a rogue task writing to 
the window backing store of multiple windows [including the Finder]. This involves 
violating the OS X memory protection sandbox and stomping on memory of any other 
task in the system. One of those tasks may have been either the Mach Kernel or the 
OS X BSD Kernel.

The OS X Kernel does not actually have any GUI code that is capable of drawing a 
line of transparent yellow squares across several windows [see item 4 in the bug
report above]. All such code exists in User Mode applications that call Core Video 
and OpenGL.

The OS X Kernel only has the driver code that passes GUI drawing code to the
video card [an ATI 5770].

This bug may have been caused by any of the GUI applications that were active 
at the time of the panic.

The fact that the panic and later system hang occurred within 1/10 second of
Firefox opening a link in a new window indicates that Firefox is probably the
GUI application that caused the lines of transparent squares across multiple
App windows and probably also stomped on their private memory.
Status: RESOLVED → UNCONFIRMED
Resolution: INVALID → ---
(Reporter)

Comment 3

3 years ago
Note: The lines of yellow squares started to appear with the last update to
Firefox BEFORE 37.0, i.e. an update released in the last month.
(Reporter)

Comment 4

3 years ago
Note2: This also may be a case of drive-by malware taking advantage of a
unpatched security bug in Firefox to try and infect OS X [i.e. an implant].
(Reporter)

Comment 5

2 years ago
Regressing Firefox to version 35.0.1 makes the problem go away
(Reporter)

Comment 6

2 years ago
Also Adobe Flash Player updated to 17.0.0.169.

No other changes to the set of programs I run were made.
(Reporter)

Comment 7

2 years ago
Continuing Kernel Panics in OS X.

Firefox is Always the last message in the System.log before the Crash/Hang.

Crash is caused by Firefox sending invalid request to an AMD Radeon HD GPU.

Crash affects all versions of OS X from 10.6 thru 10.10.

Apple refuses to address the crash because all Apple Hardware Tests pass.

System.log:
Oct 14 20:08:18 Douglas-Godfreys-Mac-Pro [0x0-0x23023].org.mozilla.firefox[0]: console.error: 
Oct 14 20:08:18 Douglas-Godfreys-Mac-Pro [0x0-0x23023].org.mozilla.firefox[0]:   [CustomizableUI]
Oct 14 20:08:18 Douglas-Godfreys-Mac-Pro [0x0-0x23023].org.mozilla.firefox[0]:   Custom widget with id loop-button does not return a valid node
Oct 14 20:09:51 localhost com.apple.launchd[1]: *** launchd[1] has started up. ***
Oct 14 20:09:51 localhost DirectoryService[15]: Improper shutdown detected
Oct 14 20:09:54 localhost configd[13]: bootp_session_transmit: bpf_write(en2) failed: Network is down (50)
Oct 14 20:09:54 localhost configd[13]: DHCP en2: INIT transmit failed
Oct 14 20:09:54 localhost configd[13]: Sleep - Filtered Sleep Failure Report - Power Button Shutdown - Apps Failure
Oct 14 20:09:54 localhost configd[13]: network configuration changed.



Kernel.log:
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: ** Device in slot: SLOT-1 **
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: ** GPU Debug Info Start **
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x000068b8
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x0000008f
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x00000001
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x00000018
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x0000a0e0
Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x00000001
Crash Signature: GPU Debug Info Start
Keywords: hang

Comment 8

2 years ago
I really do wish we could do more for you here, but we can't. An application that can cause a kernel panic - by definition - is exposing either a kernel bug or a hardware problem. It's possible that using Disk Utility to repair your filesystem will help, or possibly using the recovery tools to reinstalling the OS will help. I encourage you to try both, making sure you've got a good Time Machine backup to hand first. But we can't help with that, and I need to close this bug.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 3 years ago2 years ago
Resolution: --- → INVALID
(Reporter)

Comment 9

2 years ago
This is apparently a known bug in the interaction of the AMD Radeon Kext and user applications.
Apple will not fix the problem because No Apple Software triggers the bug. The GPU always passes 
Apple Hardware Test. And if you don't run any non-Apple software you will not get the bug.

User applications can command the GPU to do something that causes the GPU to go "Wild" and
stomp on graphics memory for multiple applications. About 50% of the time this causes a hang.
About 10% of the time this causes a Kernel Panic. 100% of the time this bug causes all windows
for all applications to be corrupted. The Kernel log file always shows a message starting with 
Oct 17 17:45:30 xxxx kernel[0]: ** GPU Debug Info Start **
followed by a dump of the GPU state which only Apple or AMD can diagnose.

This bug has been reported on multiple mac systems all of which support 64bit operation
and use AMD Radeon GPU chips. Mac Pro's with AMD Radeon 5770 cards, iMac's, MacBooks and 
MacBook Pro's all running OS X 10.6.8 thru OS X 10.10.

No system that uses a NVidia GPU has the bug.

Firefox [probably Thunderbird if you enable HTML] and Parallels Desktop all can trigger
the bug.

All of this can be found by Googling "GPU Debug Info Start" which is the message written
to the Kernel Log immediately before the system either hangs or panics. Google shows that
Apple has been aware of the bug for years but has chosen not to fix it.

Comment 10

2 years ago
Jeff, is this useful information or should this bug remain closed?
Flags: needinfo?(jmuizelaar)
I'm happy to keep this open as there's a chance that we could do something differently to avoid the crash. That being said, the chance of this being staffed is pretty low.
Flags: needinfo?(jmuizelaar)
You need to log in before you can comment on or make changes to this bug.