Closed Bug 1149750 Opened 10 years ago Closed 10 years ago

Kernel Panic immediately after Clicking on a link in Thunderbird to launch a window in Firefox

Categories

(Firefox :: Untriaged, defect)

37 Branch
x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED INVALID

People

(Reporter: douglasgodfrey, Unassigned)

Details

(Keywords: hang)

Crash Data

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:37.0) Gecko/20100101 Firefox/37.0 Build ID: 20150326190726 Steps to reproduce: Kernel Panic immediately after Clicking on the following link in Thunderbird to launch a window in Firefox <http://org.salsalabs.com/dia/track.jsp?v=2&c=9wkTpJoYcfTKJemXifhAEudME8BMtIih> Firefox had just been updated to the latest version and restarted Thunderbird 31.5.0 Firefox 37.0 OS X 10.6.8 build 10K549 with all fixes applied 1) Thunderbird and Firefox already running [Thunderbird uptime greater than 1 week] [Firefox had just been updated to latest version (37.0) 1 minute before] 2) Click on link in Thunderbird 3) Firefox becomes foreground app 4) Video artifacts visible in front-most Firefox window [4-5 lines of small yellow tint squares across front window] 5) 1/10 second later, Kernel Panic 6) On restart, System Log is flooded with error messages from Firefox 34 open Firefox windows 11 windows: KissAnime.com 11 windows: AnimeSharing.com 8 windows: WatchSeries.com 2 windows: IRS.gov 1 window: IKEA.com 1 window: Firefox Update release notes Firefox Addons: 1) about:addons-memory 2) Adblock Plus 2.6.8 3) Adblock Plus Pop-up Addon 0.9.2 4) BetterPrivacy 1.6.8 5) Certificate Patrol 2.0.14 6) CipherFox 3.10.1 7) Disable Anti-Adblock 3.1 8) Disable clipboard manipulations 1.0.1 9) Downloads Window 0.5.3 10) Element Hiding Helper for Adblock Plus 1.3.2 11) FEBE 8.6 12) Flash Video Downloader 7.2.0 13) FlashStopper 1.2.5 14) Ghostery 5.4.3 15) HTTPS-Everywhere 4.0.3 16) NoScript 2.6.9.20 17) Privacy Badger Firefox 0.2.5 18) Request Policy 0.5.28 19) Restartless Restart 9 20) RightToClick 2.9.5 21) Self-Destructing Cookies 0.4.7 22) SettingSanity 0.8.2 23) ShareMeNot 2.3.3 24) Show my Password 2.0 Actual results: Interval Since Last Panic Report: 63469312 sec Panics Since Last Report: 12 Anonymous UUID: B9916354-C922-4084-BC65-12775DB8BB19 Tue Mar 31 15:18:09 2015 panic(cpu 7 caller 0x2abf6a): Kernel trap at 0x00279ece, type 14=page fault, registers: CR0: 0x80010033, CR2: 0xffd6d6ea, CR3: 0xb6775000, CR4: 0x00000660 EAX: 0x210f51bc, EBX: 0xffd6d6d6, ECX: 0x1687fb7c, EDX: 0x04063aa0 CR2: 0xffd6d6ea, EBP: 0x8e033c58, ESI: 0x01325000, EDI: 0x00000000 EFL: 0x00010282, EIP: 0x00279ece, CS: 0x00000008, DS: 0x02f30010 Error code: 0x00000000 Backtrace (CPU 7), Frame : Return Address (4 potential args on stack) 0x8e033a48 : 0x21b837 (0x5dd7fc 0x8e033a7c 0x223ce1 0x0) 0x8e033a98 : 0x2abf6a (0x59e3d0 0x279ece 0xe 0x59e59a) 0x8e033b78 : 0x2a1a78 (0x8e033b90 0x1cfe5d24 0x8e033c58 0x279ece) 0x8e033b88 : 0x279ece (0xe 0x2320048 0x10 0x10) 0x8e033c58 : 0x25bf04 (0x210f51bc 0x1325000 0x0 0x431e0a) 0x8e033ce8 : 0x25e340 (0x2140e1ec 0x1000000 0x1 0x49b8444c) 0x8e033db8 : 0x282c75 (0x2140e1ec 0x8e033de8 0x8e033de0 0x610337b4) 0x8e033e08 : 0x242f05 (0x2140e1ec 0x610337ac 0x16432668 0x610337b4) 0x8e033e58 : 0x21dbe5 (0x6103378c 0x1643263c 0x19e678 0x103) 0x8e033e98 : 0x210a86 (0x61033700 0x0 0x60ceadc0 0x5fce0110) 0x8e033ef8 : 0x216f84 (0x61033700 0x0 0x0 0x0) 0x8e033f78 : 0x295c57 (0x16171488 0x0 0x0 0x0) 0x8e033fc8 : 0x2a256d (0x16171484 0x0 0x10 0x0) BSD process name corresponding to current thread: firefox Mac OS version: 10K549 Kernel version: Darwin Kernel Version 10.8.0: Tue Jun 7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 System model name: MacPro3,1 (Mac-F42C88C8) System uptime in nanoseconds: 4850683473151975 unloaded kexts: com.apple.filesystems.cd9660 1.4.1 (addr 0x8fb65000, size 0x36864) - last unloaded 4759466726565495 loaded kexts: com.parallels.filesystems.prlufs 2010.12.28 xxx.qnation.PeerGuardian 1.1.11 com.parallels.kext.vnic 9.0 24251.1052177 com.parallels.kext.netbridge 9.0 24251.1052177 com.parallels.kext.hidhook 9.0 24251.1052177 com.parallels.kext.hypervisor 9.0 24251.1052177 com.parallels.kext.usbconnect 9.0 24251.1052177 com.makemkv.kext.daspi 1.5 at.obdev.nke.LittleSnitch 4052 com.highpoint-tech.kext.rr64xl 1.0.3 com.SiliconImage.driver.Si3124u 2.1.4 com.apple.filesystems.udf 2.1.1 - last loaded 4759318048669700 com.apple.nke.pptp 1.5 com.apple.filesystems.autofs 2.1.0 com.apple.driver.AppleHWSensor 1.9.3d0 com.apple.driver.AudioAUUC 1.57 com.apple.Dont_Steal_Mac_OS_X 7.0.0 com.apple.iokit.CHUDUtils 364 com.apple.driver.AppleUpstreamUserClient 3.5.7 com.apple.iokit.CHUDProf 366 com.apple.driver.AppleMCCSControl 1.0.20 com.apple.driver.AppleIntelPenrynProfile 17.1 com.apple.kext.ATIFramebuffer 6.3.6 com.apple.driver.AudioIPCDriver 1.1.6 com.apple.driver.AppleHDA 2.0.5f14 com.apple.ATIRadeonX3000 6.3.6 com.apple.driver.AppleIntel8254XEthernet 2.1.3b1 com.apple.driver.AppleMCEDriver 1.1.9 com.apple.driver.AirPortBrcm43224 428.42.4 com.apple.driver.ACPI_SMC_PlatformPlugin 4.7.0a1 com.apple.driver.AppleLPC 1.5.1 com.apple.iokit.SCSITaskUserClient 2.6.8 com.apple.driver.AppleRAID 4.0.6 com.apple.BootCache 31.1 com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1 com.apple.iokit.IOAHCIBlockStorage 1.6.4 com.apple.driver.AppleUSBHub 4.2.4 com.apple.driver.AppleFWOHCI 4.7.3 com.apple.driver.AppleAHCIPort 2.1.7 com.apple.driver.AppleIntelPIIXATA 2.5.1 com.apple.driver.AppleUSBEHCI 4.2.4 com.apple.driver.AppleEFINVRAM 1.4.0 com.apple.driver.AppleUSBUHCI 4.2.0 com.apple.driver.AppleACPIButtons 1.3.6 com.apple.driver.AppleRTC 1.3.1 com.apple.driver.AppleHPET 1.5 com.apple.driver.AppleSMBIOS 1.7 com.apple.driver.AppleACPIEC 1.3.6 com.apple.driver.AppleAPIC 1.4 com.apple.driver.AppleIntelCPUPowerManagementClient 142.6.0 com.apple.security.sandbox 1 com.apple.security.quarantine 0 com.apple.nke.applicationfirewall 2.1.14 com.apple.driver.AppleIntelCPUPowerManagement 142.6.0 com.apple.nke.ppp 1.5 com.apple.driver.AppleProfileReadCounterAction 17 com.apple.driver.AppleProfileTimestampAction 10 com.apple.driver.AppleProfileThreadInfoAction 14 com.apple.driver.AppleProfileRegisterStateAction 10 com.apple.driver.AppleProfileKEventAction 10 com.apple.driver.AppleProfileCallstackAction 20 com.apple.iokit.IOSurface 74.2 com.apple.iokit.IOBluetoothSerialManager 2.4.5f3 com.apple.iokit.IOSerialFamily 10.0.3 com.apple.iokit.CHUDKernLib 365 com.apple.driver.DspFuncLib 2.0.5f14 com.apple.iokit.IOAudioFamily 1.8.3fc2 com.apple.kext.OSvKernDSPLib 1.3 com.apple.iokit.IONDRVSupport 2.2.1 com.apple.iokit.IOFireWireIP 2.0.3 com.apple.iokit.AppleProfileFamily 41.4 com.apple.driver.AppleHDAController 2.0.5f14 com.apple.iokit.IOHDAFamily 2.0.5f14 com.apple.iokit.IO80211Family 320.1 com.apple.iokit.IONetworkingFamily 1.10 com.apple.driver.AppleSMC 3.1.0d5 com.apple.driver.IOPlatformPluginFamily 4.7.0a1 com.apple.kext.ATI5000Controller 6.3.6 com.apple.kext.ATISupport 6.3.6 com.apple.iokit.IOGraphicsFamily 2.2.1 com.apple.driver.CSRUSBBluetoothHCIController 2.4.5f3 com.apple.driver.AppleUSBBluetoothHCIController 2.4.5f3 com.apple.iokit.IOBluetoothFamily 2.4.5f3 com.apple.iokit.IOUSBHIDDriver 4.2.0 com.apple.driver.AppleUSBMergeNub 4.2.4 com.apple.iokit.IOSCSIBlockCommandsDevice 2.6.8 com.apple.iokit.IOUSBMassStorageClass 2.6.7 com.apple.driver.AppleUSBComposite 3.9.0 com.apple.iokit.IOSCSIMultimediaCommandsDevice 2.6.8 com.apple.iokit.IOBDStorageFamily 1.6 com.apple.iokit.IODVDStorageFamily 1.6 com.apple.iokit.IOCDStorageFamily 1.6.1 com.apple.iokit.IOAHCISerialATAPI 1.2.6 com.apple.driver.XsanFilter 402.1 com.apple.iokit.IOATAPIProtocolTransport 2.5.1 com.apple.iokit.IOFireWireFamily 4.2.6 com.apple.iokit.IOUSBUserClient 4.2.4 com.apple.iokit.IOSCSIParallelFamily 2.1.1 com.apple.iokit.IOSCSIArchitectureModelFamily 2.6.8 com.apple.iokit.IOAHCIFamily 2.0.6 com.apple.iokit.IOATAFamily 2.5.1 com.apple.iokit.IOUSBFamily 4.2.4 com.apple.driver.AppleEFIRuntime 1.4.0 com.apple.iokit.IOHIDFamily 1.6.6 com.apple.iokit.IOSMBusFamily 1.1 com.apple.security.TMSafetyNet 6 com.apple.kext.AppleMatch 1.0.0d1 com.apple.driver.DiskImages 289.1 com.apple.iokit.IOStorageFamily 1.6.3 com.apple.driver.AppleACPIPlatform 1.3.6 com.apple.iokit.IOPCIFamily 2.6.5 com.apple.iokit.IOACPIFamily 1.3.0 Model: MacPro3,1, BootROM MP31.006C.B05, 8 processors, Quad-Core Intel Xeon, 2.8 GHz, 16 GB, SMC 1.25f4 Graphics: ATI Radeon HD 5770, ATI Radeon HD 5770, PCIe, 1024 MB Memory Module: global_name AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x88), Broadcom BCM43xx 1.0 (5.10.131.42.4) Bluetooth: Version 2.4.5f3, 2 service, 12 devices, 1 incoming serial ports Network Service: Ethernet 1, Ethernet, en0 Network Service: Ethernet 2, Ethernet, en1 PCI Card: pci1095,3124, sppci_othermassstorage, Slot-2@2,0,0 PCI Card: ATI Radeon HD 5770, sppci_displaycontroller, Slot-1 PCI Card: ATI Radeon HD 5770, ATY,HoolockParent, Slot-1 PCI Card: pci1b4b,9235, sppci_ahci, Slot-4 PCI Card: pci1103,645, sppci_raid, Slot-3 Serial ATA Device: HL-DT-ST BD-RE BE12LU38 Serial ATA Device: WDC WD1002FAEX-00Z3A0, 931.51 GB Serial ATA Device: WDC WD1002FAEX-00Z3A0, 931.51 GB Serial ATA Device: WDC WD2003FZEX-00Z4SA0, 1.82 TB Serial ATA Device: WDC WD2003FZEX-00Z4SA0, 1.82 TB Serial ATA Device: OCZ-VECTOR150, 111.79 GB Parallel ATA Device: PIONEER DVD-RW DVR-104 SCSI Device: SCSI Target Device @ 0 SCSI Device: SCSI Target Device @ 1 SCSI Device: SCSI Target Device @ 2 SCSI Device: SCSI Target Device @ 3 SCSI Device: SCSI Target Device @ 4 SCSI Device: SCSI Target Device @ 0 SCSI Device: SCSI Target Device @ 1 SCSI Device: SCSI Target Device @ 2 SCSI Device: SCSI Target Device @ 3 SCSI Device: SCSI Target Device @ 4 SCSI Device: SCSI Target Device @ 5 SCSI Device: SCSI Target Device @ 6 SCSI Device: SCSI Target Device @ 7 SCSI Device: SCSI Target Device @ 8 SCSI Device: SCSI Target Device @ 9 SCSI Device: SCSI Target Device @ 16 USB Device: Hub, 0x0409 (NEC Corporation), 0x005a, 0xfd400000 / 4 USB Device: Hub, 0x0409 (NEC Corporation), 0x005a, 0xfd300000 / 3 USB Device: CP 1500C, 0x0764 (Cyber Power Systems, Inc.), 0x0501, 0xfd310000 / 5 USB Device: Mass Storage, 0x058f (Alcor Micro, Corp.), 0x6387, 0xfd100000 / 2 USB Device: Generic USB Hub, 0x058f (Alcor Micro, Corp.), 0x9254, 0x1d200000 / 2 USB Device: Griffin PowerMate, 0x077d, 0x0410, 0x1d220000 / 5 USB Device: Macally iKeySlim, 0x2222, 0x0013, 0x1d210000 / 4 USB Device: USB Optical Mouse, 0x192f (Avago Technologies, Pte.), 0x0916, 0x1d230000 / 3 USB Device: Bluetooth USB Host Controller, 0x05ac (Apple Inc.), 0x8206, 0x5d200000 / 2 FireWire Device: built-in_hub, Up to 800 Mb/sec Expected results: New Firefox window should have opened
While this probably isn't the reply you wanted, by definition anything that can cause a kernel panic is a bug in the kernel. Thank you for your report, but this needs to go to Apple; if you agreed to submit the crash report to Apple after you restarted, that's all we can do. Thank you.
Status: UNCONFIRMED → RESOLVED
Closed: 10 years ago
Resolution: --- → INVALID
This Kernel Panic is different because it is caused by a rogue task writing to the window backing store of multiple windows [including the Finder]. This involves violating the OS X memory protection sandbox and stomping on memory of any other task in the system. One of those tasks may have been either the Mach Kernel or the OS X BSD Kernel. The OS X Kernel does not actually have any GUI code that is capable of drawing a line of transparent yellow squares across several windows [see item 4 in the bug report above]. All such code exists in User Mode applications that call Core Video and OpenGL. The OS X Kernel only has the driver code that passes GUI drawing code to the video card [an ATI 5770]. This bug may have been caused by any of the GUI applications that were active at the time of the panic. The fact that the panic and later system hang occurred within 1/10 second of Firefox opening a link in a new window indicates that Firefox is probably the GUI application that caused the lines of transparent squares across multiple App windows and probably also stomped on their private memory.
Status: RESOLVED → UNCONFIRMED
Resolution: INVALID → ---
Note: The lines of yellow squares started to appear with the last update to Firefox BEFORE 37.0, i.e. an update released in the last month.
Note2: This also may be a case of drive-by malware taking advantage of a unpatched security bug in Firefox to try and infect OS X [i.e. an implant].
Regressing Firefox to version 35.0.1 makes the problem go away
Also Adobe Flash Player updated to 17.0.0.169. No other changes to the set of programs I run were made.
Continuing Kernel Panics in OS X. Firefox is Always the last message in the System.log before the Crash/Hang. Crash is caused by Firefox sending invalid request to an AMD Radeon HD GPU. Crash affects all versions of OS X from 10.6 thru 10.10. Apple refuses to address the crash because all Apple Hardware Tests pass. System.log: Oct 14 20:08:18 Douglas-Godfreys-Mac-Pro [0x0-0x23023].org.mozilla.firefox[0]: console.error: Oct 14 20:08:18 Douglas-Godfreys-Mac-Pro [0x0-0x23023].org.mozilla.firefox[0]: [CustomizableUI] Oct 14 20:08:18 Douglas-Godfreys-Mac-Pro [0x0-0x23023].org.mozilla.firefox[0]: Custom widget with id loop-button does not return a valid node Oct 14 20:09:51 localhost com.apple.launchd[1]: *** launchd[1] has started up. *** Oct 14 20:09:51 localhost DirectoryService[15]: Improper shutdown detected Oct 14 20:09:54 localhost configd[13]: bootp_session_transmit: bpf_write(en2) failed: Network is down (50) Oct 14 20:09:54 localhost configd[13]: DHCP en2: INIT transmit failed Oct 14 20:09:54 localhost configd[13]: Sleep - Filtered Sleep Failure Report - Power Button Shutdown - Apps Failure Oct 14 20:09:54 localhost configd[13]: network configuration changed. Kernel.log: Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: ** Device in slot: SLOT-1 ** Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: ** GPU Debug Info Start ** Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x000068b8 Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x0000008f Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x00000001 Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x00000018 Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x0000a0e0 Oct 14 20:08:27 Douglas-Godfreys-Mac-Pro kernel[0]: 0x00000001
Crash Signature: GPU Debug Info Start
Keywords: hang
I really do wish we could do more for you here, but we can't. An application that can cause a kernel panic - by definition - is exposing either a kernel bug or a hardware problem. It's possible that using Disk Utility to repair your filesystem will help, or possibly using the recovery tools to reinstalling the OS will help. I encourage you to try both, making sure you've got a good Time Machine backup to hand first. But we can't help with that, and I need to close this bug.
Status: UNCONFIRMED → RESOLVED
Closed: 10 years ago10 years ago
Resolution: --- → INVALID
This is apparently a known bug in the interaction of the AMD Radeon Kext and user applications. Apple will not fix the problem because No Apple Software triggers the bug. The GPU always passes Apple Hardware Test. And if you don't run any non-Apple software you will not get the bug. User applications can command the GPU to do something that causes the GPU to go "Wild" and stomp on graphics memory for multiple applications. About 50% of the time this causes a hang. About 10% of the time this causes a Kernel Panic. 100% of the time this bug causes all windows for all applications to be corrupted. The Kernel log file always shows a message starting with Oct 17 17:45:30 xxxx kernel[0]: ** GPU Debug Info Start ** followed by a dump of the GPU state which only Apple or AMD can diagnose. This bug has been reported on multiple mac systems all of which support 64bit operation and use AMD Radeon GPU chips. Mac Pro's with AMD Radeon 5770 cards, iMac's, MacBooks and MacBook Pro's all running OS X 10.6.8 thru OS X 10.10. No system that uses a NVidia GPU has the bug. Firefox [probably Thunderbird if you enable HTML] and Parallels Desktop all can trigger the bug. All of this can be found by Googling "GPU Debug Info Start" which is the message written to the Kernel Log immediately before the system either hangs or panics. Google shows that Apple has been aware of the bug for years but has chosen not to fix it.
Jeff, is this useful information or should this bug remain closed?
Flags: needinfo?(jmuizelaar)
I'm happy to keep this open as there's a chance that we could do something differently to avoid the crash. That being said, the chance of this being staffed is pretty low.
Flags: needinfo?(jmuizelaar)
You need to log in before you can comment on or make changes to this bug.