Closed Bug 1421201 Opened 5 years ago Closed 5 years ago

Sandbox: Unexpected EOF, op 0 flags 0302 path SOMEWHERE

Categories

(Core :: Security: Process Sandboxing, defect, P3)

x86_64
Linux
defect

Tracking

()

RESOLVED DUPLICATE of bug 1243108

People

(Reporter: kikuo, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: sb+)

Attachments

(1 file, 1 obsolete file)

I was trying to reproduce Bug 1414464 and make the mochitest repeat about 30000 times for single one file ('vp9 in mp4' [1])
A sandbox error "GECKO(587) | Sandbox: Unexpected EOF, op 0 flags 0302 path /dev/shm/org.chromium.iI7bas" happened at 25373rd time.

Not sure if this is a general bug about sandbox. 
But it results to GMP IPC decryption failure, so that playback cannot proceed correctly.
Logs are provided, see attachment.

SimpleTest START Loop 25372
...
... Good
...
SimpleTest START Loop 25373
...
... timeout
...


[1] https://searchfox.org/mozilla-central/rev/7a8c667bdd2a4a32746c9862356e199627c0896d/dom/media/test/manifest.js#808-829
Component: Audio/Video → Audio/Video: GMP
Blocks: 1414464
With GMP traces.
Sandbox error happens when calling ChromiumCDMParent::SendBufferToCDM()
Attachment #8932378 - Attachment is obsolete: true
Hi Jed,
This issue has happened on Linux and related to sandbox.

Could you please take a look to see if it is a normal error due to certain reason?

The error may lead the test intermittently failed.

Thank you.
Flags: needinfo?(jld)
This looks like bug 1420475.  The patch from bug 1422198 adds a log message which should give a little more information; can you reproduce this with that patch applied?
Component: Audio/Video: GMP → Security: Process Sandboxing
Flags: needinfo?(jld)
See Also: → 1420475
(In reply to Jed Davis [:jld] (⏰UTC-6) from comment #3)
> This looks like bug 1420475.  The patch from bug 1422198 adds a log message
> which should give a little more information; can you reproduce this with
> that patch applied?

Sure, I'll give it a try.
(In reply to Jed Davis [:jld] (⏰UTC-6) from comment #3)
> This looks like bug 1420475.  The patch from bug 1422198 adds a log message
> which should give a little more information; can you reproduce this with
> that patch applied?

Weird !
I reproduced this issues two times after I applied the patch from bug 1422198, but when this issue happened, that error message never show up.  Only 1 sandbox error (Unexpected EOF...) is shown. Is there any missing point ?
Flags: needinfo?(jld)
Whiteboard: sb+
I don't see any other path in the broker code that could cause this.

I was wondering if maybe something else (in Firefox or maybe in a system library) was closing a file descriptor twice, and normally failing with EBADF but sometimes closing one end of the response socket when it races with the broker, but in that case then the broker should be getting EBADF.  There are other variations on use-after-close, but it doesn't make much sense that it would manifest like this.

But I think we've seen this bug before: bug 1243108.
Flags: needinfo?(jld)
See Also: → 1243108
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
See Also: 1420475, 1243108
I just got this error when opening this link specifically: https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
If I open it in another tab, Firefox doesn't crash. Once I switch to the tab, it does, and takes X11 with it.

I'm on 63.0 (64-bit), Ubuntu 18.04, 4.18.0-10-generic.
(In reply to slobber from comment #8)
> I just got this error when opening this link specifically:
> https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
> If I open it in another tab, Firefox doesn't crash. Once I switch to the
> tab, it does, and takes X11 with it.
> 
> I'm on 63.0 (64-bit), Ubuntu 18.04, 4.18.0-10-generic.

This error message is expected if the browser crashes, and a content process tries to request opening a file after the main process (containing the file broker) has exited.  Please file a new bug for the crash.
(In reply to Jed Davis [:jld] (⏰UTC-6) from comment #9)
> (In reply to slobber from comment #8)
> > I just got this error when opening this link specifically:
> > https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
> > If I open it in another tab, Firefox doesn't crash. Once I switch to the
> > tab, it does, and takes X11 with it.
> > 
> > I'm on 63.0 (64-bit), Ubuntu 18.04, 4.18.0-10-generic.
> 
> This error message is expected if the browser crashes, and a content process
> tries to request opening a file after the main process (containing the file
> broker) has exited.  Please file a new bug for the crash.

Jed,

Apologies, as it turns out the bug was with my window manager (dwm) all along. Emojis in its titlebar caused it to crash.
You need to log in before you can comment on or make changes to this bug.