1955221 - Crash on file drag and drop [unknown object]

Status: UNCONFIRMED

(Core :: Widget: Gtk, defect, P3)

Description

[Hugh]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0

Steps to reproduce:

Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0

1. Log into a site that accepts drag and drop to upload files
2. Drag file or folder into the window to attempt upload

This bug is present on Fedora 41 and on both the distribution RPM package and the .tar file distributed on the website. It is also present on a default profile.

I was able to replicate this behavior across both www.messenger.com when trying to upload a file on a chat and on Google Drive.

Actual results:

Firefox usually crashes immediately upon letting go of the mouse.

Occasionally, the file uploads successfully, but in my experience, it usually crashes.

I have attached the details reported in the Crash Reporter here: https://pastebin.com/vTK7kivw
When running the firefox bin through the command line, it results in output like this: https://pastebin.com/7dSiGhRE

I am not sure why, but even though it says that it generated a minidump, the directory listed doesn't actually contain anything.

Expected results:

The file is uploaded smoothly without any issues

Comment 1

[BugBot [:suhaib / :marco]]

The Bugbug bot thinks this bug should belong to the 'Core::Widget: Gtk' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[:gerard-majax]

Please share about:crashes links. also upload content here and not on pastebin, so we dont loose information over time

Comment 3

[Martin Stránský [:stransky] (ni? me)]

There's more info how to get crash data from Firefox:
https://fedoraproject.org/wiki/Debugging_guidelines_for_Mozilla_products#Using_Mozilla_crash_reporter
https://fedoraproject.org/wiki/Debugging_guidelines_for_Mozilla_products#Using_coredumpctl_to_get_backtrace
Thanks.

Comment 4

[Hugh]

Attachment: CLI output from when Firefox crashes

Comment 5

[Hugh]

Attachment: Output of "Details" from Firefox Crash Reporter

Comment 6

[Hugh]

(In reply to :gerard-majax from comment #2)

Please share about:crashes links. also upload content here and not on pastebin, so we dont loose information over time

Apologies. I have attached the files. One of the crash reports can be found here: https://crash-stats.mozilla.org/report/index/0830a356-0bde-4164-b91d-62f130250324.

(In reply to Martin Stránský [:stransky] (ni? me) from comment #3)

There's more info how to get crash data from Firefox:
https://fedoraproject.org/wiki/Debugging_guidelines_for_Mozilla_products#Using_Mozilla_crash_reporter
https://fedoraproject.org/wiki/Debugging_guidelines_for_Mozilla_products#Using_coredumpctl_to_get_backtrace
Thanks.

The commands listed involving gdb don't seem to work anymore. Running them just has Firefox open and attempting to search for "gdb"

I believe the error may involve Nautilus, the default GNOME file manager, as I was not able to replicate the crash when running Thunar.

Comment 7

[:gerard-majax]

https://searchfox.org/mozilla-central/source/widget/gtk/nsWaylandDisplay.cpp#635

Comment 8

[:gerard-majax]

Which version of gnome ? I'll check again tomorrow if I repro on Ubuntu 24.10

Comment 9

[Martin Stránský [:stransky] (ni? me)]

It's Wayland protocol error bug: (gnome) unknown object (4278190081), message error(ous)
Do you have any reproduction steps? Do you do drag & drop for instance?
If that comes from D&D operation it may be fixed by Bug 1949726.
If you see it on regular browsing I'd like to hear more how to reproduce it.

Comment 10

[Hugh]

(In reply to :gerard-majax from comment #8)

Which version of gnome ? I'll check again tomorrow if I repro on Ubuntu 24.10

It's GNOME 47, and running nautilus --version reports it is at version 47.1.

(In reply to Martin Stránský [:stransky] (ni? me) from comment #9)

It's Wayland protocol error bug: (gnome) unknown object (4278190081), message error(ous)
Do you have any reproduction steps? Do you do drag & drop for instance?
If that comes from D&D operation it may be fixed by Bug 1949726.
If you see it on regular browsing I'd like to hear more how to reproduce it.

It is from a drag-and-drop operation. I'm not sure when the patch for your linked bag landed, but I tried on Nightly build 20250324091950, and the bug still existed.

Anecdotally, I experience the crash 'out-of-the-box' when I try to drag any file into any site that accepts uploads that way. E.g., I was able to replicate the crash by creating a new profile, logging into Google Drive and trying to upload a file there. But I've been told by other users in the Fedora forum that they cannot reproduce it so simply.

Comment 11

[Martin Stránský [:stransky] (ni? me)]

(In reply to Hugh from comment #10)

(In reply to :gerard-majax from comment #8)

Which version of gnome ? I'll check again tomorrow if I repro on Ubuntu 24.10

It's GNOME 47, and running nautilus --version reports it is at version 47.1.

(In reply to Martin Stránský [:stransky] (ni? me) from comment #9)

It's Wayland protocol error bug: (gnome) unknown object (4278190081), message error(ous)
Do you have any reproduction steps? Do you do drag & drop for instance?
If that comes from D&D operation it may be fixed by Bug 1949726.
If you see it on regular browsing I'd like to hear more how to reproduce it.

It is from a drag-and-drop operation. I'm not sure when the patch for your linked bag landed, but I tried on Nightly build 20250324091950, and the bug still existed.

Anecdotally, I experience the crash 'out-of-the-box' when I try to drag any file into any site that accepts uploads that way. E.g., I was able to replicate the crash by creating a new profile, logging into Google Drive and trying to upload a file there. But I've been told by other users in the Fedora forum that they cannot reproduce it so simply.

Great! Can you please run nightly on terminal as:

WAYLAND_DEBUG=1 MOZ_LOG="WidgetDrag:5" ./firefox -P test_profile_name > log.txt 2>&1

reproduce the issue and attach the log.txt here? (You should use nightly with testing profile instead of your production one so there's the test_profile_name field).
Thanks!

Comment 12

[Hugh]

Attachment: WAYLAND_DEBUG=1 MOZ_LOG="WidgetDrag:5" log file

Comment 13

[Martin Stránský [:stransky] (ni? me)]

Are you sure it's correct log file? I don't see any error/crash there and I don't see any "D/WidgetDrag" log entries either.
Thanks.

Comment 14

[Hugh]

Attachment: new WAYLAND_DEBUG=1 MOZ_LOG="WidgetDrag:5" log file

Comment 15

[Hugh]

Apologies for the inactivity. I lost track of time while focusing on other life matters.

The behavior still persists as of the latest stable and nightly release (20250615211407) and as of GNOME 48 and Nautilus 48.1. A new crash report can be found here, and I have also reproduced the results of the "WidgetDrag:5" command and attached it.

I am not certain why there are no "D/WidgetDrag" log entries. They are present when I drag and drop from Thunar but not with Nautilus.

Comment 16

[Martin Stránský [:stransky] (ni? me)]

That doesn't make much sense to me, looks correct:

[3316054.162] {Default Queue} wl_data_offer#4278190082.action(0)
[3316054.340] {Default Queue}  -> wl_data_offer#4278190082.set_actions(7, 2)
[3316054.354] {Default Queue}  -> wl_data_offer#4278190082.accept(3946, "text/plain;charset=utf-8")
[3316056.304] {Default Queue} wl_data_offer#4278190082.action(4)
[3316056.470] {Default Queue}  -> wl_data_offer#4278190082.set_actions(0, 0)
[3316056.482] {Default Queue}  -> wl_data_offer#4278190082.accept(3946, nil)
[3316060.001] {Default Queue}  -> wl_data_offer#4278190082.set_actions(7, 2)
[3316061.634] {Default Queue}  -> wl_data_offer#4278190082.set_actions(7, 2)
[3316061.646] {Default Queue}  -> wl_data_offer#4278190082.finish()
[3316061.654] {Default Queue}  -> wl_data_offer#4278190082.destroy()
[GFX1-]: (gnome) Wayland protocol error: unknown object (4278190082), message error(ous)

Comment 17

[Martin Stránský [:stransky] (ni? me)]

How do you do the D&D? Can you create a screencast of it?
https://fedoraproject.org/wiki/How_to_debug_Firefox_problems#Create_screenshot/screencast_for_a_bug_report
I'll try to reproduce locally.
Thanks.

Comment 18

[Hugh]

Attachment: Screenrecording of drag and drop

Comment 19

[Hugh]

(In reply to Martin Stránský [:stransky] (ni? me) from comment #17)

How do you do the D&D? Can you create a screencast of it?
https://fedoraproject.org/wiki/How_to_debug_Firefox_problems#Create_screenshot/screencast_for_a_bug_report
I'll try to reproduce locally.
Thanks.

I have attached a screenrecording. In the recording, you can see me drag-and-dropping multiple times. The behavior is sporadic. It only registered the "drop" in the last attempt, I believe.

Additionally, I also realized something new about the behavior. It only seems to happen when I alt-tab into Firefox while holding the file. If I do a simple drag and drop across windows (without alt-tabbing), the cursor never flickers and Firefox never crashes.

Comment 20

[Steve Fink [:sfink] [:s:]]

I saw this yesterday when dragging & dropping from one of my monitors to another. No alt-tabbing. I restarted, tried again, and got the same crash:

https://crash-stats.mozilla.org/report/index/bp-06d853b5-df90-4f55-871f-9434b0250902
https://crash-stats.mozilla.org/report/index/bp-a9f9ae36-b587-4e3e-a9fe-126740250902

I'm on Fedora 38, GNOME 44, Wayland, Nightly BuildID 20250901162158. My raw MOZ_CRASH Reason is: (gnome) unknown object (4278190081), message error(ous) Proxy: WP:E WP:CA WP:CR WP:CPCA WP:CPCF -

Comment 21

[BugBot [:suhaib / :marco]]

Redirect a needinfo that is pending on an inactive user to the triage owner.
:stransky, since the bug doesn't have a severity set, could you please set the severity or close the bug?

For more information, please visit BugBot documentation.

Comment 22

[Martin Stránský [:stransky] (ni? me)]

Bug 2025329 may help here - we can update the D&D code then to use valid objects.