Bug#771083: iceweasel: Crash when killing iceweasel if flashplugin has been loaded

Santiago Gimeno santiago.gimeno at gmail.com
Wed Nov 26 16:22:46 UTC 2014


Package: iceweasel
Version: 31.2.0esr-3~deb7u1
Severity: normal

Dear Maintainer,

Launching iceweasel in safe-mode accessing a webpage that requires flash and then killing iceweasel makes iceweasel crash.

The output I receive is:

$ iceweasel -safe-mode www.youtube.es

(iceweasel:21004): GLib-WARNING **: In call to g_spawn_sync(), exit status of a child process was requested but SIGCHLD action was set to SIG_IGN and ECHILD was received by waitpid(), so exit status can't be returned. This is a bug in the program calling g_spawn_sync(); either don't request the exit status, or don't set the SIGCHLD action.

** (iceweasel:21004): WARNING **: Terminación anómala de programa al lanzar («spawn») el comando «dbus-launch --autolaunch=3c3da9241f38c2d53543fc085475ee29 --binary-syntax --close-stderr»: 
Failed to open VDPAU backend libvdpau_nvidia.so: no se puede abrir el fichero del objeto compartido: No existe el fichero o el directorio
[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533
[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533

when I kill iceweasel with pkill:

$ pkill iceweasel


Iceweasel doesn't crash if I simply close the window nor if I interrupt the process via Ctrl+C.


The coredump generated is:

Core was generated by `/usr/lib/iceweasel/plugin-container /usr/lib/flashplugin-nonfree/libflashplayer'.
Program terminated with signal 11, Segmentation fault.
#0  mozalloc_abort (msg=0xb13fba90 "[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533") at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/memory/mozalloc/mozalloc_abort.cpp:30
30      /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/memory/mozalloc/mozalloc_abort.cpp: No existe el fichero o el directorio.
(gdb) set pagination off
(gdb) bt full
#0  mozalloc_abort (msg=0xb13fba90 "[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533") at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/memory/mozalloc/mozalloc_abort.cpp:30
No locals.
#1  0xb3feb3ba in Abort (aMsg=<optimized out>) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/xpcom/base/nsDebugImpl.cpp:421
No locals.
#2  NS_DebugBreak (aSeverity=<optimized out>, aStr=0xb5df2394 "Aborting on channel error.", aExpr=0x0, aFile=0xb5df2110 "/build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp", aLine=1533) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/xpcom/base/nsDebugImpl.cpp:408
        buf = {buffer = "[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533\000г\000\000\000\000\000\000\000\000 0r\262\002", '\000' <repeats 15 times>"\364, \277}\267\220\022dz\002\000\000\000Ļ?\261%\204|\267", '\000' <repeats 28 times>, "8?dz\370}}\267\220\273?\261\000\000\000\000\006\000\000\000\030Z\177\267\000\000\000\000\000\360"..., curlen = 137}
        ll = <optimized out>
        sevString = <optimized out>
#3  0xb41ff71d in mozilla::ipc::MessageChannel::OnChannelErrorFromLink (this=0xb2534048) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp:1533
No locals.
#4  0xb4202875 in mozilla::ipc::ProcessLink::OnChannelError (this=0xb25b2040) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageLink.cpp:355
        lock = {mMonitor = 0xb250a200}
#5  0xb41ea641 in IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking (this=0xb2568000, fd=3) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:848
        send_server_hello_msg = false
#6  0xb41e6e48 in OnLibeventNotification (context=0xb2568000, fd=3, flags=<optimized out>) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_pump_libevent.cc:214
No locals.
#7  base::MessagePumpLibevent::OnLibeventNotification (fd=3, flags=2, context=0xb2568000) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_pump_libevent.cc:206
No locals.
#8  0xb372b522 in event_base_loop () from /usr/lib/i386-linux-gnu/libevent-2.0.so.5
No symbol table info available.
#9  0xb41e6d43 in base::MessagePumpLibevent::Run (this=0xb251a460, delegate=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_pump_libevent.cc:340
        poll_tv = {tv_sec = -1321221432, tv_usec = -1285742344}
        delay = {delta_ = -5597796212723397748}
        did_work = <optimized out>
        old_in_run = false
#10 0xb41f1a0e in MessageLoop::RunInternal (this=this at entry=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_loop.cc:229
No locals.
#11 0xb41f1b36 in RunHandler (this=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_loop.cc:222
No locals.
#12 MessageLoop::Run (this=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_loop.cc:196
        save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xb13fc0bc, previous_state_ = 0x0}
#13 0xb41f5687 in base::Thread::ThreadMain (this=0xb2515888) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/thread.cc:168
        aLocal = -73 '\267'
        message_loop = {<base::MessagePump::Delegate> = {_vptr.Delegate = 0xb7452330}, type_ = MessageLoop::TYPE_IO, id_ = 2, work_queue_ = {c = {<std::_Deque_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_map = 0xb2509da0, _M_map_size = 8, _M_start = {_M_cur = 0xadf9f4f0, _M_first = 0xadf9f400, _M_last = 0xadf9f5f4, _M_node = 0xb2509db8}, _M_finish = {_M_cur = 0xadf9f4f0, _M_first = 0xadf9f400, _M_last = 0xadf9f5f4, _M_node = 0xb2509db8}}}, <No data fields>}}, delayed_work_queue_ = {c = {<std::_Vector_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_start = 0x0, _M_finish = 0x0, _M_end_of_storage = 0x0}}, <No data fields>}, comp = {<std::binary_function<MessageLoop::PendingTask, MessageLoop::PendingTask, bool>> = {<No data fields>}, <No data fields>}}, deferred_non_nestable_work_queue_ = {c = {<std::_Deque_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_map = 0xb2509d80, _M_map_size = 8, _M_start = {_M_cur = 0xb250e600, _M_first = 0xb250e600, _M_last = 0xb250e7f4, _M_node = 0xb2509d8c}, _M_finish = {_M_cur = 0xb250e600, _M_first = 0xb250e600, _M_last = 0xb250e7f4, _M_node = 0xb2509d8c}}}, <No data fields>}}, pump_ = {ptr_ = 0xb251a460}, destruction_observers_ = {observers_ = {<std::_Vector_base<MessageLoop::DestructionObserver*, std::allocator<MessageLoop::DestructionObserver*> >> = {_M_impl = {<std::allocator<MessageLoop::DestructionObserver*>> = {<__gnu_cxx::new_allocator<MessageLoop::DestructionObserver*>> = {<No data fields>}, <No data fields>}, _M_start = 0x0, _M_finish = 0x0, _M_end_of_storage = 0x0}}, <No data fields>}, notify_depth_ = 0, type_ = base::ObserverList<MessageLoop::DestructionObserver, false>::NOTIFY_ALL}, nestable_tasks_allowed_ = true, exception_restoration_ = false, thread_name_ = {static npos = <optimized out>, _M_dataplus = {<std::allocator<char>> = {<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data fields>}, _M_p = 0xb2509d0c "Chrome_ChildThread"}}, incoming_queue_ = {c = {<std::_Deque_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_map = 0xb2509d60, _M_map_size = 8, _M_start = {_M_cur = 0xadf9f8dc, _M_first = 0xadf9f800, _M_last = 0xadf9f9f4, _M_node = 0xb2509d78}, _M_finish = {_M_cur = 0xadf9f8dc, _M_first = 0xadf9f800, _M_last = 0xadf9f9f4, _M_node = 0xb2509d78}}}, <No data fields>}}, incoming_queue_lock_ = {lock_ = {os_lock_ = {__data = {__lock = 0, __count = 0, __owner = 0, __kind = 0, __nusers = 0, {__spins = 0, __list = {__next = 0x0}}}, __size = '\000' <repeats 23 times>, __align = 0}}}, state_ = 0xb13fc080, run_depth_base_ = 1, transient_hang_timeout_ = 0, permanent_hang_timeout_ = 0, next_sequence_num_ = 0}
#14 0xb41e72e7 in ThreadFunc (closure=0xb2515888) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/platform_thread_posix.cc:39
        delegate = 0xb2515888
#15 0xb7799954 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
No symbol table info available.
#16 0xb3aaac1e in clone () from /lib/i386-linux-gnu/libc.so.6
No symbol table info available.
(gdb)

-- Package-specific info:

-- Extensions information
Name: Default theme
Location: /usr/lib/iceweasel/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

-- Plugins information
Name: Google Talk Plugin
Location: /opt/google/talkplugin/libnpgoogletalk.so
Package: google-talkplugin
Status: enabled

Name: Google Talk Plugin Video Renderer
Location: /opt/google/talkplugin/libnpo1d.so
Package: google-talkplugin
Status: enabled

Name: Java(TM) Plug-in 1.6.0_34
Location: /usr/lib/jvm/java-6-sun-1.6.0.34/jre/lib/i386/libnpjp2.so
Package: sun-java6-bin
Status: enabled

Name: Shockwave Flash (11.2.202.418)
Location: /usr/lib/flashplugin-nonfree/libflashplayer.so
Status: enabled


-- Addons package information
ii  google-talkplu 5.38.6.0-1   i386         Google Talk Plugin
ii  iceweasel      31.2.0esr-3~ i386         Web browser based on Firefox
ii  sun-java6-bin  6.34-1       i386         Sun Java(TM) Runtime Environment 

-- System Information:
Debian Release: 7.7
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.14.13-smartion+ (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils               4.3.2
ii  fontconfig                2.9.0-7.1
ii  libasound2                1.0.25-4
ii  libatk1.0-0               2.4.0-2
ii  libc6                     2.13-38+deb7u6
ii  libcairo2                 1.12.2-3
ii  libdbus-1-3               1.6.8-1+deb7u4
ii  libdbus-glib-1-2          0.100.2-1
ii  libevent-2.0-5            2.0.19-stable-3
ii  libffi5                   3.0.10-3
ii  libfontconfig1            2.9.0-7.1
ii  libfreetype6              2.4.9-1.1
ii  libgcc1                   1:4.7.2-5
ii  libgdk-pixbuf2.0-0        2.26.1-1
ii  libglib2.0-0              2.33.12+really2.32.4-5
ii  libgtk2.0-0               2.24.10-2
ii  libhunspell-1.3-0         1.3.2-4
ii  libpango1.0-0             1.30.0-1
ii  libsqlite3-0              3.7.13-1+deb7u1
ii  libstartup-notification0  0.12-1
ii  libstdc++6                4.7.2-5
ii  libx11-6                  2:1.5.0-1+deb7u1
ii  libxext6                  2:1.3.1-2+deb7u1
ii  libxrender1               1:0.9.7-1+deb7u1
ii  libxt6                    1:1.1.3-1+deb7u1
ii  procps                    1:3.3.3-3
ii  zlib1g                    1:1.2.7.dfsg-13

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
pn  fonts-mathjax          <none>
pn  fonts-oflb-asana-math  <none>
pn  fonts-stix | otf-stix  <none>
ii  libcanberra0           0.28-6
pn  libgnomeui-0           <none>
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u2
pn  mozplugger             <none>

-- no debconf information



More information about the pkg-mozilla-maintainers mailing list