Bug 225364 - security/nss: 3.35 upgrade makes firefox-esr and thunderbird crash, mainly with a fresh profile
Summary: security/nss: 3.35 upgrade makes firefox-esr and thunderbird crash, mainly wi...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-gecko (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-21 19:29 UTC by Martin Birgmeier
Modified: 2018-02-03 12:34 UTC (History)
2 users (show)

See Also:
jbeich: maintainer-feedback+
jbeich: maintainer-feedback? (lichray)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Birgmeier 2018-01-21 19:29:45 UTC
The latest update of
  ca_root_nss-3.34.1 -> ca_root_nss-3.35
  nss-3.34.1 -> nss-3.35
  nspr-4.17 -> nspr-4.18
breaks firefox-esr and thunderbird: Both dump core everytime on exit, sometimes also during operation.

Rolling back these three ports resolves the issue. I didn't yet find the time to see which of the three is actually to blame.

Also, the yarip extension on firefox-esr is not functional anymore (https://addons.mozilla.org/en-US/firefox/addon/yarip/). Also fixed with rolling back.
Comment 1 Jan Beich freebsd_committer freebsd_triage 2018-01-22 00:56:04 UTC
Probably regressed by https://hg.mozilla.org/projects/nss/rev/b0658ed36763
Try setting NSS_DEFAULT_DB_TYPE=dbm via environ(7).
Comment 2 Brad Sliger 2018-01-25 14:42:05 UTC
I think this is happening to me.  Setting NSS_DEFAULT_DB_TYPE=dbm in Firefox's environment keeps Firefox from crashing.  Thanks!

Firefox will start up, do its initial splashes and animations for a few seconds, then crash with messages like the following:

[Child 81768] ###!!! ABORT: Aborting on channel error.: file /usr/ports/www/firefox-esr/work/firefox-52.6.0esr/ipc/glue/MessageChannel.cpp, line 2152
[Child 81768] ###!!! ABORT: Aborting on channel error.: file /usr/ports/www/firefox-esr/work/firefox-52.6.0esr/ipc/glue/MessageChannel.cpp, line 2152
zsh: bus error  firefox

dmesg will show something like:

pid 77538 (firefox), uid 1009: exited on signal 10
pid 81768 (firefox), uid 1009: exited on signal 11

Firefox won't crash for me if it already has its configuration files.  If it's started in an empty sandbox, without setting NSS_DEFAULT_DB_TYPE=dbm, it'll crash fairly quickly.
Comment 3 commit-hook freebsd_committer freebsd_triage 2018-01-30 00:54:36 UTC
A commit references this bug:

Author: jbeich
Date: Tue Jan 30 00:54:16 UTC 2018
New revision: 460357
URL: https://svnweb.freebsd.org/changeset/ports/460357

Log:
  www/firefox-esr: work around race on sqlite3 init

  PR:		225364
  Obtained from:	upstream (Firefox 56)
  MFH:		2018Q1 (r459458 follow up)

Changes:
  head/mail/thunderbird/Makefile
  head/mail/thunderbird/files/patch-bug1380706
  head/www/firefox-esr/Makefile
  head/www/firefox-esr/files/patch-bug1380706
  head/www/seamonkey/Makefile
  head/www/seamonkey/files/patch-bug1380706
Comment 4 Jan Beich freebsd_committer freebsd_triage 2018-01-30 01:02:06 UTC
Did comment 3 help?
Comment 5 Brad Sliger 2018-01-30 17:48:02 UTC
I built a new firefox-esr with patch-bug1380706 from that commit and firefox stays running without setting NSS_DEFAULT_DB_TYPE=dbm.  So, it appears to help me.
Comment 6 Brad Sliger 2018-01-31 04:21:06 UTC
My Thunderbird install (thunderbird-52.6.0_1) also crashes when it starts without its configuration files.  Upgrading to thunderbird-52.6.0_2, which includes patch-bug1380706, fixes the problem for me.
Comment 7 Jan Beich freebsd_committer freebsd_triage 2018-01-31 07:29:46 UTC
Zhihao Yuan, can you check if www/palemoon is affected?
Comment 8 commit-hook freebsd_committer freebsd_triage 2018-01-31 21:00:41 UTC
A commit references this bug:

Author: jbeich
Date: Wed Jan 31 21:00:32 UTC 2018
New revision: 460530
URL: https://svnweb.freebsd.org/changeset/ports/460530

Log:
  MFH: r460357

  www/firefox-esr: work around race on sqlite3 init

  PR:		225364
  Obtained from:	upstream (Firefox 56)
  Approved by:	ports-secteam (swills)

Changes:
_U  branches/2018Q1/
  branches/2018Q1/mail/thunderbird/Makefile
  branches/2018Q1/mail/thunderbird/files/patch-bug1380706
  branches/2018Q1/www/firefox-esr/Makefile
  branches/2018Q1/www/firefox-esr/files/patch-bug1380706
  branches/2018Q1/www/seamonkey/Makefile
  branches/2018Q1/www/seamonkey/files/patch-bug1380706
Comment 9 Martin Birgmeier 2018-02-03 12:34:23 UTC
Thank you Jan, I just installed the latest versions of thunderbird and firefox-esr, and they are working again (including yarip).

-- Martin