Looks like a flaw in flashplayer (ran out of stack space). I don't know
if there is a way to subscribe Adobe to a bug report, so I'm just making
it public after removing the coredump.

** Attachment removed: "CoreDump.gz"
   
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1232614/+attachment/3848303/+files/CoreDump.gz

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1232614

Title:
  plugin-container crashed with SIGSEGV in
  pthread_cond_timedwait@@GLIBC_2.3.2()

Status in “firefox” package in Ubuntu:
  New

Bug description:
  This crash seems to occur on google maps. Nothing else seems to
  provoke it. This might be a security vulnerability so im marking as
  such.

  ProblemType: Crash
  DistroRelease: Ubuntu 13.10
  Package: firefox 24.0+build1-0ubuntu1
  ProcVersionSignature: Ubuntu 3.11.0-8.15-generic 3.11.1
  Uname: Linux 3.11.0-8-generic i686
  AddonCompatCheckDisabled: False
  ApportVersion: 2.12.5-0ubuntu1
  Architecture: i386
  AudioDevicesInUse:
   USER        PID ACCESS COMMAND
   /dev/snd/controlC0:  ryan      20525 F.... pulseaudio
  BuildID: 20130917154333
  Channel: Unavailable
  Date: Sat Sep 28 20:48:54 2013
  ExecutablePath: /usr/lib/firefox/plugin-container
  ForcedLayersAccel: False
  IfupdownConfig:
   # interfaces(5) file used by ifup(8) and ifdown(8)
   auto lo
   iface lo inet loopback
  InstallationDate: Installed on 2013-09-27 (1 days ago)
  InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Beta i386 (20130925.1)
  IpRoute:
   default via 192.168.1.1 dev wlan0  proto static 
   192.168.1.0/24 dev wlan0  proto kernel  scope link  src 192.168.1.111  
metric 9
  MarkForUpload: True
  PrefSources: prefs.js
  ProcCmdline: /usr/lib/firefox/plugin-container 
/usr/lib/flashplugin-installer/libflashplayer.so -greomni 
/usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir 
/usr/lib/firefox/browser 2468 false plugin
  Profiles: Profile0 (Default) - LastVersion=24.0/20130917154333 (In use)
  RelatedPackageVersions:
   gnome-shell       3.8.4-0ubuntu5
   totem-mozilla     3.8.2-0ubuntu1
   rhythmbox-mozilla 2.99.1-0ubuntu1
  RunningIncompatibleAddons: False
  SegvAnalysis:
   Segfault happened at: 0xb4b94c47 <pthread_cond_timedwait@@GLIBC_2.3.2+359>:  
lock cmpxchg %edx,(%ebx)
   PC (0xb4b94c47) ok
   source "%edx" ok
   destination "(%ebx)" (0xad06add4) not located in a known VMA region (needed 
writable region)!
   Stack memory exhausted (SP below stack segment)
  SegvReason: writing unknown VMA
  Signal: 11
  SourcePackage: firefox
  StacktraceTop:
   pthread_cond_timedwait@@GLIBC_2.3.2 () at 
../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:262
   ?? () from /usr/lib/flashplugin-installer/libflashplayer.so
   ?? () from /usr/lib/flashplugin-installer/libflashplayer.so
   ?? () from /usr/lib/flashplugin-installer/libflashplayer.so
   ?? () from /usr/lib/flashplugin-installer/libflashplayer.so
  Title: plugin-container crashed with SIGSEGV in 
pthread_cond_timedwait@@GLIBC_2.3.2()
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: adm cdrom dip lp lpadmin plugdev sambashare sudo
  dmi.bios.date: 04/28/2011
  dmi.bios.vendor: Hewlett-Packard
  dmi.bios.version: F.23
  dmi.board.asset.tag: Base Board Asset Tag
  dmi.board.name: 1584
  dmi.board.vendor: Hewlett-Packard
  dmi.board.version: 85.36
  dmi.chassis.asset.tag: Chassis Asset Tag
  dmi.chassis.type: 10
  dmi.chassis.vendor: Hewlett-Packard
  dmi.chassis.version: Chassis Version
  dmi.modalias: 
dmi:bvnHewlett-Packard:bvrF.23:bd04/28/2011:svnHewlett-Packard:pnHPMini110-3700:pvr057E11A000202B00000300100:rvnHewlett-Packard:rn1584:rvr85.36:cvnHewlett-Packard:ct10:cvrChassisVersion:
  dmi.product.name: HP Mini 110-3700
  dmi.product.version: 057E11A000202B00000300100
  dmi.sys.vendor: Hewlett-Packard

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1232614/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to