1421201 - Sandbox: Unexpected EOF, op 0 flags 0302 path SOMEWHERE

Status: RESOLVED DUPLICATE of bug 1243108

(Core :: Security: Process Sandboxing, defect, P3)

Description

[Kilik Kuo [:kikuo] (inactive)]

Attachment: Sandbox: Unexpected EOF, op 0 flags 0302

I was trying to reproduce Bug 1414464 and make the mochitest repeat about 30000 times for single one file ('vp9 in mp4' [1])
A sandbox error "GECKO(587) | Sandbox: Unexpected EOF, op 0 flags 0302 path /dev/shm/org.chromium.iI7bas" happened at 25373rd time.

Not sure if this is a general bug about sandbox. 
But it results to GMP IPC decryption failure, so that playback cannot proceed correctly.
Logs are provided, see attachment.

SimpleTest START Loop 25372
...
... Good
...
SimpleTest START Loop 25373
...
... timeout
...


[1] https://searchfox.org/mozilla-central/rev/7a8c667bdd2a4a32746c9862356e199627c0896d/dom/media/test/manifest.js#808-829

Comment 1

[Kilik Kuo [:kikuo] (inactive)]

Attachment: Sandbox: Unexpected EOF, op 0 flags 0302 .... when calling ChromiumCDMParent::SendBufferToCD

With GMP traces.
Sandbox error happens when calling ChromiumCDMParent::SendBufferToCDM()

Comment 2

[James Cheng[:JamesCheng]]

Hi Jed,
This issue has happened on Linux and related to sandbox.

Could you please take a look to see if it is a normal error due to certain reason?

The error may lead the test intermittently failed.

Thank you.

Comment 3

[Jed Davis [:jld] ⟨⏰|UTC-8⟩ ⟦he/him⟧]

This looks like bug 1420475.  The patch from bug 1422198 adds a log message which should give a little more information; can you reproduce this with that patch applied?

Comment 4

[Kilik Kuo [:kikuo] (inactive)]

(In reply to Jed Davis [:jld] (⏰UTC-6) from comment #3)
> This looks like bug 1420475.  The patch from bug 1422198 adds a log message
> which should give a little more information; can you reproduce this with
> that patch applied?

Sure, I'll give it a try.

Comment 5

[Kilik Kuo [:kikuo] (inactive)]

(In reply to Jed Davis [:jld] (⏰UTC-6) from comment #3)
> This looks like bug 1420475.  The patch from bug 1422198 adds a log message
> which should give a little more information; can you reproduce this with
> that patch applied?

Weird !
I reproduced this issues two times after I applied the patch from bug 1422198, but when this issue happened, that error message never show up.  Only 1 sandbox error (Unexpected EOF...) is shown. Is there any missing point ?

Comment 6

[Jed Davis [:jld] ⟨⏰|UTC-8⟩ ⟦he/him⟧]

I don't see any other path in the broker code that could cause this.

I was wondering if maybe something else (in Firefox or maybe in a system library) was closing a file descriptor twice, and normally failing with EBADF but sometimes closing one end of the response socket when it races with the broker, but in that case then the broker should be getting EBADF.  There are other variations on use-after-close, but it doesn't make much sense that it would manifest like this.

But I think we've seen this bug before: bug 1243108.

Comment 8

[slobber]

I just got this error when opening this link specifically: https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
If I open it in another tab, Firefox doesn't crash. Once I switch to the tab, it does, and takes X11 with it.

I'm on 63.0 (64-bit), Ubuntu 18.04, 4.18.0-10-generic.

Comment 9

[Jed Davis [:jld] ⟨⏰|UTC-8⟩ ⟦he/him⟧]

(In reply to slobber from comment #8)
> I just got this error when opening this link specifically:
> https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
> If I open it in another tab, Firefox doesn't crash. Once I switch to the
> tab, it does, and takes X11 with it.
> 
> I'm on 63.0 (64-bit), Ubuntu 18.04, 4.18.0-10-generic.

This error message is expected if the browser crashes, and a content process tries to request opening a file after the main process (containing the file broker) has exited.  Please file a new bug for the crash.

Comment 10

[slobber]

(In reply to Jed Davis [:jld] (⏰UTC-6) from comment #9)
> (In reply to slobber from comment #8)
> > I just got this error when opening this link specifically:
> > https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
> > If I open it in another tab, Firefox doesn't crash. Once I switch to the
> > tab, it does, and takes X11 with it.
> > 
> > I'm on 63.0 (64-bit), Ubuntu 18.04, 4.18.0-10-generic.
> 
> This error message is expected if the browser crashes, and a content process
> tries to request opening a file after the main process (containing the file
> broker) has exited.  Please file a new bug for the crash.

Jed,

Apologies, as it turns out the bug was with my window manager (dwm) all along. Emojis in its titlebar caused it to crash.