1239968 - [Ubuntu] crash in libgdk-x11-2.0.so.0.2400.10@0x72546

Status: RESOLVED INCOMPLETE

(External Software Affecting Firefox Graveyard :: Flash (Adobe), defect)

Description

[Vasilica Tamas, QA [:vtamas]]

This bug was filed from the Socorro interface and is 
report bp-e27b1b1f-899a-4c36-9f4f-b77ad2160115.
=============================================================


STR
1.Open http://www.bbc.com/news/entertainment-arts-35313604
2.Zoom in and out.

AR
Adobe Flash plugin has crashed. 

Additional notes:
- Run into this on Ubuntu 12.04 64-bit, using Firefox 44 beta 9 (20160114165817) with Adobe Flash Player 11.2.202.559.
- Firefox 46.0a1 (2015-01-14) and Firefox 45.0a2 (2016-01-14) are affected as well. 
- This issue also reproduces on Firefox 40 (20150807085045).
- It is not reproducible on Windows and Mac platforms.


More reports: 
bp-910b6b0b-defe-4a77-a3ad-42c8b2160115
bp-6de56b3e-d94e-4759-ae62-6b8f02160115
bp-03207b91-db04-41f2-b34e-6c0622160115
bp-6e923c46-a9ed-4f3e-96c6-078162160115

Comment 1

[Kamil Jozwiak [:kjozwiak]]

I ran this on a m-c asan build and got the following stack, hopefully it has some helpful information:

* build used: http://archive.mozilla.org/pub/firefox/tinderbox-builds/mozilla-central-linux64-asan/1452866008/
** build id: 20160115055328

=================================================================
==3760==ERROR: AddressSanitizer: SEGV on unknown address 0x00000000007c (pc 0x7fa15a20e884 sp 0x7ffd829a4d20 bp 0x7ffd829a4dc0 T0)
    #0 0x7fa15a20e883 in gdk_window_configure_finished ??:?
    #1 0x7fa15a69f052 in gtk_decorated_window_move_resize_window ??:?
    #2 0x7fa15c87e5e6 in g_closure_invoke ??:?
    #3 0x7fa15c897087 in g_signal_emit_valist ??:?
    #4 0x7fa15c897ce1 in g_signal_emit ??:?
    #5 0x7fa15a507e2f in gtk_container_check_resize ??:?
    #6 0x7fa15a1bdce6 in ?? ??:0
    #7 0x7fa15c5aece4 in g_main_context_dispatch ??:?
    #8 0x7fa15c5af047 in g_main_context_dispatch ??:?
    #9 0x7fa15c5af0eb in g_main_context_iteration ??:?
    #10 0x7fa15a57e640 in gtk_main_iteration ??:?
    #11 0x7fa14c3921da in ?? ??:0
    #12 0x7fa15c5af702 in g_source_get_time ??:?
    #13 0x7fa15c5aece4 in g_main_context_dispatch ??:?
    #14 0x7fa15c5af047 in g_main_context_dispatch ??:?
    #15 0x7fa15c5af0eb in g_main_context_iteration ??:?
    #16 0x7fa15a57e640 in gtk_main_iteration ??:?
    #17 0x7fa14c3921da in ?? ??:0
    #18 0x7fa15c5af702 in g_source_get_time ??:?
    #19 0x7fa15c5aece4 in g_main_context_dispatch ??:?
    #20 0x7fa15c5af047 in g_main_context_dispatch ??:?
    #21 0x7fa15c5af0eb in g_main_context_iteration ??:?
    #22 0x7fa1629d4a3b in RunWithDispatcher message_pump_glib.cc:192
    #23 0x7fa1629ed07c in RunInternal message_loop.cc:234
    #24 0x7fa169c69711 in XRE_InitChildProcess nsEmbedFunctions.cpp:625
    #25 0x48d760 in content_process_main plugin-container.cpp:237
    #26 0x7fa15f92eec4 in __libc_start_main libc-start.c:287
    #27 0x48cabc in _start ??:?

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV ??:0 ??
==3760==ABORTING

Comment 2

[Ryan VanderMeulen [:RyanVM]]

I've been able to reproduce this crash in builds as far back as 2013-01-01 so far. Clearly not a new regression. Given that this is crashing in the the Flash plugin, which is no longer supported on Linux, what are our options here?

Comment 3

[Ryan VanderMeulen [:RyanVM]]

Kamil, is there any reason to believe that this is a security issue or just a harmless crash?

Comment 4

[Kamil Jozwiak [:kjozwiak]]

Talked to :mccr8 (Andrew) via irc and this looks like a null crash.. CC'ing both karlt and glandium as this is crashing inside the GTK code.

As RyanVM mentioned in comment #2, not sure what the plan should be here as Adobe abandoned Flash and only does security fixes.

Comment 5

[Petruta Horea [:phorea], Desktop QA]

https://crash-stats.mozilla.com/report/index/bp-df77f032-6680-4d7e-b122-1b8cb2160219

Encountered the crash signature @ libgdk-x11-2.0.so.0.2400.23@0x6b9f6 using the same steps as in comment 0 while validating Firefox 45 beta 7. I'm adding it here since it is very similar.

Shockwave Flash 11.2.202.569
Ubuntu 14.04 32-bit

Comment 6

[Benjamin Smedberg]

I'm closing a lot of bugs which are filed as Adobe Flash bugs which are either irrelevant, not actionable, or not serious enough to track in the Mozilla bug tracker. For the most part, Flash bugs should be filed in Adobe bugbase, and we'll only track a few highly-critical issues in the Mozilla tracker.