Bug ID | 1173636 |
---|---|
Summary | Chromium crashes helper process after start |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Other |
Assignee | screening-team-bugs@suse.de |
Reporter | mkoutny@suse.com |
QA Contact | qa-bugs@suse.de |
CC | tchvatal@suse.com |
Found By | --- |
Blocker | --- |
This happened after some TW update (alas I don't know which was the last
working version), there relevant versions:
chromium-83.0.4103.116-2.1.x86_64
glibc-2.31-6.1.x86_64
kernel 5.8.0-rc3-1.g162848a-default
Relevant excerpt from coredumpctl info
> Command Line: /usr/lib64/chromium/chromium --type=renderer --enable-threaded-compositing --disable-webrtc-apm-in-audio-service --field-trial-handle=18408759359563851481,8353948009982933349,131072 --lang=en-US --enable-auto-reload --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --shared-files=v8_snapshot_data:100
> Executable: /usr/lib64/chromium/chromium
> Control Group: /user.slice/user-1000.slice/user@1000.service/gnome-launched-chromium-browser.desktop-18521.scope
> Owner UID: 1000 (mkoutny)
> Message: Process 20584 (chromium) of user 1000 dumped core.
>
> Stack trace of thread 4:
> #0 0x000055be6a79e35e _ZN7sandbox19CrashSIGSYS_HandlerERKNS_17arch_seccomp_dataEPv (chromium + 0x579435e)
> #1 0x000055be6a7a8879 _ZN7sandbox4Trap6SigSysEiP9siginfo_tP10ucontext_t (chromium + 0x579e879)
> #2 0x00007fc139b2a260 __restore_rt (libpthread.so.0 + 0x14260)
> #3 0x00007fc136429a60 __fcntl64_nocancel_adjusted (libc.so.6 + 0xf5a60)
> #4 0x00007fc136424ef4 __GI___libc_fcntl64 (libc.so.6 + 0xf0ef4)
> #5 0x000055be69408f31 evutil_make_socket_nonblocking (chromium + 0x43fef31)
> #6 0x000055be6940a432 evsignal_init (chromium + 0x4400432)
> #7 0x000055be6940ae3e epoll_init (chromium + 0x4400e3e)
> #8 0x000055be6940830a event_base_new (chromium + 0x43fe30a)
> #9 0x000055be6933b273 _ZN4base19MessagePumpLibeventC2Ev (chromium + 0x4331273)
> #10 0x000055be6927ac1d _ZN4base11MessagePump6CreateENS_15MessagePumpTypeE (chromium + 0x4270c1d)
> #11 0x000055be692e01d4 _ZN4base8internal7InvokerINS0_9BindStateIZNS_6Thread16StartWithOptionsERKNS3_7OptionsEEUlNS_15MessagePumpTypeEE_JS7_EEEFSt10unique_ptrINS_11MessagePumpESt14default_deleteISB_EEvEE7RunOnceEPNS0_13BindStateBaseE (chromium + 0x42d61d4)
> #12 0x000055be692e07e6 _ZN4base12_GLOBAL__N_129SequenceManagerThreadDelegate19BindToCurrentThreadENS_10TimerSlackE (chromium + 0x42d67e6)
> #13 0x000055be692e0bc3 _ZN4base6Thread10ThreadMainEv (chromium + 0x42d6bc3)
> #14 0x000055be6932a325 _ZN4base12_GLOBAL__N_110ThreadFuncEPv (chromium + 0x4320325)
> #15 0x00007fc139b1eeaa start_thread (libpthread.so.0 + 0x8eaa)
> #16 0x00007fc136433b1f __clone (libc.so.6 + 0xffb1f)
>
> Stack trace of thread 1:
> #0 0x00007fc1364992fe __memmove_avx_unaligned_erms (libc.so.6 + 0x1652fe)
> #1 0x000055be67ed521b _ZN2v88internal8FlagList18SetFlagsFromStringEPKcm (chromium + 0x2ecb21b)
> #2 0x000055be67d942f9 _ZN2v82V818SetFlagsFromStringEPKcm (chromium + 0x2d8a2f9)
> #3 0x000055be6ce9fa91 _ZN7content17RenderProcessImplC2Ev (chromium + 0x7e95a91)
> #4 0x000055be6ce9fd9f _ZN7content17RenderProcessImpl6CreateEv (chromium + 0x7e95d9f)
> #5 0x000055be6ced099c _ZN7content12RendererMainERKNS_18MainFunctionParamsE (chromium + 0x7ec699c)
> #6 0x000055be68cecda4 _ZN7content9RunZygoteEPNS_19ContentMainDelegateE (chromium + 0x3ce2da4)
> #7 0x000055be68cede70 _ZN7content21ContentMainRunnerImpl3RunEb (chromium + 0x3ce3e70)
> #8 0x000055be68d18d79 _ZN15service_manager4MainERKNS_10MainParamsE (chromium + 0x3d0ed79)
> #9 0x000055be68ceb91b _ZN7content11ContentMainERKNS_17ContentMainParamsE (chromium + 0x3ce191b)
> #10 0x000055be65f24f35 ChromeMain (chromium + 0xf1af35)
> #11 0x00007fc13635acca __libc_start_main (libc.so.6 + 0x26cca)
> #12 0x000055be65f24d7a _start (chromium + 0xf1ad7a)
>
> Stack trace of thread 2:
> #0 0x00007fc13671de44 _ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base (libstdc++.so.6 + 0xc3e44)
> #1 0x000055be69317378 _ZN4base5debug12_GLOBAL__N_122SandboxSymbolizeHelper26OpenObjectFileContainingPcEmRmS3_Pci (chromium + 0x430d378)
> #2 0x000055be69401870 _ZN6googleL20SymbolizeAndDemangleEPvPci (chromium + 0x43f7870)
> #3 0x000055be69315fff _ZN4base5debug12_GLOBAL__N_116ProcessBacktraceEPKPvmPKcPNS1_22BacktraceOutputHandlerE (chromium + 0x430bfff)
> #4 0x000055be69316bc3 _ZNK4base5debug10StackTrace15PrintWithPrefixEPKc (chromium + 0x430cbc3)
> #5 0x000055be693165c1 _ZN4base5debug12_GLOBAL__N_122StackDumpSignalHandlerEiP9siginfo_tPv (chromium + 0x430c5c1)
> #6 0x00007fc139b2a260 __restore_rt (libpthread.so.0 + 0x14260)
> #7 0x000055be6a79e35e _ZN7sandbox19CrashSIGSYS_HandlerERKNS_17arch_seccomp_dataEPv (chromium + 0x579435e)
> #8 0x000055be6a7a8879 _ZN7sandbox4Trap6SigSysEiP9siginfo_tP10ucontext_t (chromium + 0x579e879)
> #9 0x00007fc139b2a260 __restore_rt (libpthread.so.0 + 0x14260)
> #10 0x00007fc136429a60 __fcntl64_nocancel_adjusted (libc.so.6 + 0xf5a60)
> #11 0x00007fc136424ef4 __GI___libc_fcntl64 (libc.so.6 + 0xf0ef4)
> #12 0x000055be69408f31 evutil_make_socket_nonblocking (chromium + 0x43fef31)
> #13 0x000055be6940a432 evsignal_init (chromium + 0x4400432)
> #14 0x000055be6940ae3e epoll_init (chromium + 0x4400e3e)
> #15 0x000055be6940830a event_base_new (chromium + 0x43fe30a)
> #16 0x000055be6933b273 _ZN4base19MessagePumpLibeventC2Ev (chromium + 0x4331273)
> #17 0x000055be6927ac1d _ZN4base11MessagePump6CreateENS_15MessagePumpTypeE (chromium + 0x4270c1d)
> #18 0x000055be692e01d4 _ZN4base8internal7InvokerINS0_9BindStateIZNS_6Thread16StartWithOptionsERKNS3_7OptionsEEUlNS_15MessagePumpTypeEE_JS7_EEEFSt10unique_ptrINS_11MessagePumpESt14default_deleteISB_EEvEE7RunOnceEPNS0_13BindStateBaseE (chromium + 0x42d61d4)
> #19 0x000055be692e07e6 _ZN4base12_GLOBAL__N_129SequenceManagerThreadDelegate19BindToCurrentThreadENS_10TimerSlackE (chromium + 0x42d67e6)
> #20 0x000055be692e0bc3 _ZN4base6Thread10ThreadMainEv (chromium + 0x42d6bc3)
> #21 0x000055be6932a325 _ZN4base12_GLOBAL__N_110ThreadFuncEPv (chromium + 0x4320325)
> #22 0x00007fc139b1eeaa start_thread (libpthread.so.0 + 0x8eaa)
> #23 0x00007fc136433b1f __clone (libc.so.6 + 0xffb1f)
>
> Stack trace of thread 3:
> #0 0x00007fc139b25b08 futex_abstimed_wait_cancelable (libpthread.so.0 + 0xfb08)
> #1 0x000055be69326c2a _ZN4base17ConditionVariable9TimedWaitERKNS_9TimeDeltaE (chromium + 0x431cc2a)
> #2 0x000055be693276ff _ZN4base13WaitableEvent9TimedWaitERKNS_9TimeDeltaE (chromium + 0x431d6ff)
> #3 0x000055be69351cf6 _ZN4base8internal12WorkerThread9RunWorkerEv (chromium + 0x4347cf6)
> #4 0x000055be69352393 _ZN4base8internal12WorkerThread15RunPooledWorkerEv (chromium + 0x4348393)
> #5 0x000055be6932a325 _ZN4base12_GLOBAL__N_110ThreadFuncEPv (chromium + 0x4320325)
> #6 0x00007fc139b1eeaa start_thread (libpthread.so.0 + 0x8eaa)
> #7 0x00007fc136433b1f __clone (libc.so.6 + 0xffb1f)
It looks to me like wrong pointer was passed to fcntl().
Since it's TW I'm expecting similar troubles from time to time, so I file this
for the reference. I can do some debugging if something would be helpful.