firefox freezes on http://qt.nokia.com

[Alistair Buxton]

Binary package hint: firefox-3.5

Steps to reproduce:

1. Go to http://qt.nokia.com/
2. Click on "QT In Use" image
3. On the next page, click "QT in Visual Effects" image

Firefox locks up 100% of the time. Tested with a new blank profile.

ProblemType: Bug
Architecture: i386
Date: Thu Dec 24 00:39:34 2009
DistroRelease: Ubuntu 9.10
NonfreeKernelModules: nvidia
Package: firefox-3.5 3.5.6+nobinonly-0ubuntu0.9.10.1
ProcEnviron:
 PATH=(custom, user)
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-16.53-generic
SourcePackage: firefox-3.5
Uname: Linux 2.6.31-16-generic i686

[Micah Gersten (micahg)]

@Ubuntu Security
Could this be an apparmor issue with Flash? I see something in the KernLog.txt file.

[marlow79 (moreno-omar89)]

Just did it but firefox didn't freeze.
Tested it out using
ubuntu 9.10
firefox 3.5.6 while having several tabs open.
eeepc 1005ha

doesn't make sense that your freezing on that particular page because
it has no flash, the webpage is similar to the page you had to use to get
there.

[Micah Gersten (micahg)]

@marlow79

Just because you can't reproduce doesn't mean that it's not valid. I asked the Security Team to look at this bug. Please leave it open for them.

[Alistair Buxton (a-j-buxton)]

Sometimes it does freeze on the first page, about 10% of the time. Clicking the second link does crash it every single time though.

[Alistair Buxton (a-j-buxton)]

Oh BTW, those apparmor messages are from about 9 hours before the first crash occured.

[Micah Gersten (micahg)]

@ Security Team
You can ignore and unsubscribe. Thanks.

@Alistair Buxton
Does it freeze or crash? If it crashes, we need an apport crash report. Thanks.

[Alistair Buxton (a-j-buxton)]

It freezes and has to be killed.

[Alistair Buxton (a-j-buxton)]

Running in strace -e trace=file the last lines are:

stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3661, ...}) = 0
stat64("null/jss", 0xbfced5b0) = -1 ENOENT (No such file or directory)
open("/tmp/.com.sun.deploy.net.socket.32283.7745889521205398601.AF_UNIX", O_RDWR|O_CREAT|O_EXCL|O_LARGEFILE, 0666) = 40
stat64("/tmp/.com.sun.deploy.net.socket.32283.7745889521205398601.AF_UNIX", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
unlink("/tmp/.com.sun.deploy.net.socket.32283.7745889521205398601.AF_UNIX") = 0
stat64("/usr/lib/jvm/java-6-sun-1.6.0.16/jre/bin/java", {st_mode=S_IFREG|0755, st_size=47308, ...}) = 0

Which points to java as the culprit.

[Alistair Buxton (a-j-buxton)]

I confirm that the crash is caused by Java. When I visit this page:

http://java.com/en/download/help/testvm.xml

The first time, the test applet does not load up, even though Java is installed. After reloading a couple of times, Firefox eventually freezes. This suggests a sequence of events like:

1. The first time Firefox attempts to load the Java plugin, it fails, freezing part way, and locking some resource.
2. The second time Firefox attempts to load the Java plugin, the frozen instance is still hanging around, causing the second instance to freeze at an earlier point, and freezing Firefox with it.

[Micah Gersten (micahg)]

Thank you for reporting this to Ubuntu. Could you please generate an apport crash report for this?
You can enable apport for one instance like this:
sudo service apport start force_start=1

Then, reproduce the freeze and:
 killall -11 firefox

That should generate a crash report which shows the freeze. Please note this bug # in the new report.

I am marking this invalid as apport will open a new bug when the crash is generated. If it does not, you can reset the status of this one to New and we will try something else.