Bug#989332: libwebkit2gtk-4.0-37: May 30 upgrade for DSA-4923-1 broke the epiphany browser

2021-06-03 Thread Alberto Garcia
On Thu, Jun 03, 2021 at 01:37:45AM +0200, Jose wrote:
> > Can you install gstreamer1.0-plugins-good and try again?
> 
> That was the issue. Thank you for helping.
> 
> I don't understand why it was working before the libwebkit2gtk
> update.  Maybe this is a dependency that should be added to the
> epiphany package?

WebKitGTK requires gstreamer1.0-plugins-good in order to play audio.
In earlier versions if the plugins were not found it would simply not
play any audio but continue browsing (that's why the plugins are not a
hard dependency but a recommendation).

This changed in WebKitGTK 2.32, so we either have to make it a
dependency or make it work again without the plugins installed.

I'll fix this for bullseye, but I'm not sure if there will be a new
security update just for this.

Berto



Bug#989332: libwebkit2gtk-4.0-37: May 30 upgrade for DSA-4923-1 broke the epiphany browser

2021-06-02 Thread Alberto Garcia
On Wed, Jun 02, 2021 at 09:21:54PM +0200, Jose wrote:
> Berto,
> 
> Thanks.
> 
> Here is the full gdb bt after installing the debug symbols.
> 
> Please tell me if you'd like me to do any additional tests
> or debugging.
> 
> --josé

> #0  0x7f707b64e7bb in __GI_raise (sig=sig@entry=6) at 
> ../sysdeps/unix/sysv/linux/raise.c:50
> #1  0x7f707b639535 in __GI_abort () at abort.c:79
> #2  0x7f7080746085 in CRASH_WITH_INFO(...) () at 
> DerivedSources/ForwardingHeaders/wtf/Assertions.h:713
> #3  0x7f7080746085 in 
> WebCore::MediaPlayerPrivateGStreamer::createAudioSink() ()
> at 
> ../Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:1322

Can you install gstreamer1.0-plugins-good and try again?

Berto



Bug#989332: libwebkit2gtk-4.0-37: May 30 upgrade for DSA-4923-1 broke the epiphany browser

2021-06-02 Thread Alberto Garcia
On Wed, Jun 02, 2021 at 06:11:56PM +0200, Jose wrote:
> Hi Berto,
> 
> Sorry for the delay. Yopmail went down a little bit after I sent my
> initial report.
> 
> Discord still crashes for me. I'm attaching the gdb trace you
> requested. I opened epiphany with a blank home screen, then went
> to the discord site and clicked on "open discord in the browser"
> 
> As you can see, I have the same version of epiphany that you used
> in your own test:
> 
>   Installed: 3.32.1.2-3~deb10u1
>   Candidate: 3.32.1.2-3~deb10u1
> 
> I may be able to reproduce the error due to my using discord and belonging
> to some servers. This may make epiphany/webkit or the associated 
> javascript do some rendering or something I don't know that used to work
> and stopped after the libwebkit patch. It's just normal discord servers,
> nothing hacked or fancy afaik.

Yes, I guess the reason is the servers you belong to because I really
cannot reproduce the problem.

If you run Epiphany from the command line, does it show any error
message when it crashes? There's an abort() there which might give us
a clue (the rest of the backtrace if unfortunately not very useful
without the symbols).

Also, can you try with the Minibrowser?

$ /usr/lib/*/webkit2gtk-4.0/MiniBrowser https://discord.com

One more thing, you can also try without the JIT:

$ JavaScriptCoreUseJIT=0 epiphany

If this last one doesn't crash, can you tell me what CPU model does
your computer have?

> If you'd like me to download the debug symbols and generate another
> bt, please tell me so.

Unfortunately they don't seem to be available yet for your build:

http://debug.mirrors.debian.org/debian-debug/pool/main/w/webkit2gtk/

You would need to build them yourself (or I can also provide the debug
packages for you if you prefer).

Berto



Bug#989332: libwebkit2gtk-4.0-37: May 30 upgrade for DSA-4923-1 broke the epiphany browser

2021-06-01 Thread Alberto Garcia
On Tue, Jun 01, 2021 at 12:19:26PM +0200, jose wrote:

> Epiphany is based on libwebkit2. I access discord as a web app on
> epiphany.  To do so I go to the discord site [1] and click on "Open
> Discord in your browser".
> 
> Since the upgrade this systematically results in epiphany
> complaining with a "Something went wrong while displaying this
> page".

FWIW I just logged in to Discord just fine with webkit 2.32.1-1~deb10u1
and Epiphany 3.32.1.2-3~deb10u1.

Berto



Bug#989332: libwebkit2gtk-4.0-37: May 30 upgrade for DSA-4923-1 broke the epiphany browser

2021-06-01 Thread Alberto Garcia
On Tue, Jun 01, 2021 at 12:19:26PM +0200, jose wrote:
> Package: libwebkit2gtk-4.0-37
> Version: 2.32.1-1~deb10u1
> Severity: important
> 
> Since the upgrade this systematically results in epiphany
> complaining with a "Something went wrong while displaying this
> page".

Hmm... that sounds like a problem with the web process, can you run
gdb?

1. open epiphany
2. look for the WebKitWebProcess process (pidof WebKitWebProcess)
3. gdb -p  /usr/lib/*/webkit2gtk-4.0/WebKitWebProcess
4. type 'cont' on the gdb prompt
5. open discord and try to reproduce the bug
6. if the web process crashes you should get the gdb prompt again. type
   'bt' and send the output.

Thanks!

Berto



Bug#989332: libwebkit2gtk-4.0-37: May 30 upgrade for DSA-4923-1 broke the epiphany browser

2021-06-01 Thread jose
Package: libwebkit2gtk-4.0-37
Version: 2.32.1-1~deb10u1
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

Epiphany is based on libwebkit2. I access discord as a web app on epiphany.
To do so I go to the discord site [1] and click on "Open Discord
in your browser". 

Since the upgrade this systematically results in epiphany complaining 
with a "Something went wrong while displaying this page". I uninstalled
and purged both epiphany and webkitgtk2 files in my home dir (.cache,
.config, cookies, history) and reinstalled them. The bug still persists.

I don't have this issue when using chromium to open discord
in the same way.

Note that my system was up to date and this issue began immediately
after the DSA-4923-1 webkit2gtk security upgrade.

[1] https://discord.com/

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

I uninstalled and purged both epiphany and webkitgtk2 files in my home 
dir (.cache, .config, cookies, history) and reinstalled them. 
The bug still persists.

   * What was the outcome of this action?

The bug still persists.

   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 10.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-16-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libwebkit2gtk-4.0-37 depends on:
ii  bubblewrap  0.3.1-4
ii  libatk1.0-0 2.30.0-2
ii  libc6   2.28-10
ii  libcairo-gobject2   1.16.0-4+deb10u1
ii  libcairo2   1.16.0-4+deb10u1
ii  libegl1 1.1.0-1
ii  libenchant1c2a  1.6.0-11.1+b1
ii  libfontconfig1  2.13.1-2
ii  libfreetype62.9.1-3+deb10u2
ii  libgcc1 1:8.3.0-6
ii  libgcrypt20 1.8.4-5
ii  libgdk-pixbuf2.0-0  2.38.1+dfsg-1
ii  libgl1  1.1.0-1
ii  libglib2.0-02.58.3-2+deb10u2
ii  libgstreamer-gl1.0-01.14.4-2+deb10u1
ii  libgstreamer-plugins-base1.0-0  1.14.4-2+deb10u1
ii  libgstreamer1.0-0   1.14.4-1
ii  libgtk-3-0  3.24.5-1
ii  libharfbuzz-icu02.3.1-1
ii  libharfbuzz0b   2.3.1-1
ii  libhyphen0  2.8.8-7
ii  libicu6363.1-6+deb10u1
ii  libjavascriptcoregtk-4.0-18 2.32.1-1~deb10u1
ii  libjpeg62-turbo 1:1.5.2-2+deb10u1
ii  libnotify4  0.7.7-4
ii  libopenjp2-72.3.0-2+deb10u2
ii  libpango-1.0-0  1.42.4-8~deb10u1
ii  libpangocairo-1.0-0 1.42.4-8~deb10u1
ii  libpng16-16 1.6.36-6
ii  libseccomp2 2.3.3-4
ii  libsecret-1-0   0.18.7-1
ii  libsoup2.4-12.64.2-2
ii  libsqlite3-03.27.2-3+deb10u1
ii  libstdc++6  8.3.0-6
ii  libsystemd0 241-7~deb10u7
ii  libtasn1-6  4.13-3
ii  libwayland-client0  1.16.0-1
ii  libwayland-egl1 1.16.0-1
ii  libwayland-server0  1.16.0-1
ii  libwebp60.6.1-2
ii  libwebpdemux2   0.6.1-2
ii  libwoff11.0.2-1
ii  libx11-62:1.6.7-1+deb10u2
ii  libxcomposite1  1:0.4.4-2
ii  libxdamage1 1:1.1.4-3+b3
ii  libxml2 2.9.4+dfsg1-7+deb10u1
ii  libxrender1 1:0.9.10-1
ii  libxslt1.1  1.1.32-2.2~deb10u1
ii  libxt6  1:1.1.5-1+b3
ii  xdg-dbus-proxy  0.1.1-1
ii  zlib1g  1:1.2.11.dfsg-1

Versions of packages libwebkit2gtk-4.0-37 recommends:
ii  gstreamer1.0-alsa  1.14.4-2+deb10u1
ii  gstreamer1.0-gl1.14.4-2+deb10u1
ii  gstreamer1.0-libav 1.15.0.1+git20180723+db823502-2+deb10u1
pn  gstreamer1.0-plugins-good  
ii  gstreamer1.0-pulseaudio1.14.4-1+deb10u1
ii  libgl1-mesa-dri18.3.6-2+deb10u1
pn  xdg-desktop-portal-gtk 

libwebkit2gtk-4.0-37 suggests no packages.

-- no debconf information