[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Bug Watch Updater]

Launchpad has imported 9 comments from the remote bug at
http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.


On 2010-03-22T20:15:55+00:00 Matthias Klose wrote:

Icedtea dont load/runs/works with applets. One example are geogebra applet.
Trying to load any applets from this page would fail. 
http://www.slu.edu/classes/maymk/GeoGebra/

One applet that fail:
http://www.slu.edu/classes/maymk/GeoGebra/SecantToTangent.html

Reply at:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/561124/comments/0


On 2010-03-22T20:16:15+00:00 Matthias Klose wrote:

Created attachment 317
error log

Reply at:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/561124/comments/1


On 2010-03-22T20:16:37+00:00 Matthias Klose wrote:

Created attachment 318
plugin debug log

Reply at:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/561124/comments/2


On 2010-04-11T21:06:54+00:00 Matthias Klose wrote:

with a build from 20100411 head/1.8-branch I only see these hangs if
security.provider.9 in java.security is uncommented.

a simpler applet showing the same behaviour:
http://www.gurusheaven.de/security/anonymitaets_test.shtml

visiting the page with security.provider.9 commented:

Looking for 0xb5f9a90c 0xb3f3cfb0 0xb5fb6bdc (document)
java version 1.6.0_18
OpenJDK Runtime Environment (IcedTea6 1.8) (6b18~pre4-1ubuntu4~ppa1)
OpenJDK Server VM (build 16.0-b13, mixed mode)
java.lang.InterruptedException: sleep interrupted
at java.lang.Thread.sleep(Native Method)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:674)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:649)
at 
sun.applet.PluginStreamHandler.handleMessage(PluginStreamHandler.java:270)
at 
sun.applet.PluginMessageHandlerWorker.run(PluginMessageHandlerWorker.java:82)
java.lang.InterruptedException: sleep interrupted
at java.lang.Thread.sleep(Native Method)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:629)
at 
sun.applet.PluginStreamHandler.handleMessage(PluginStreamHandler.java:270)
at 
sun.applet.PluginMessageHandlerWorker.run(PluginMessageHandlerWorker.java:82)
java.lang.InterruptedException: sleep interrupted
at java.lang.Thread.sleep(Native Method)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:735)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:649)
at 
sun.applet.PluginStreamHandler.handleMessage(PluginStreamHandler.java:270)
at 
sun.applet.PluginMessageHandlerWorker.run(PluginMessageHandlerWorker.java:82)

visiting the page with security.provider.9 uncommented:
Looking for 0xb4178f4c 0xb3a58b20 0xb59fdbcc (document)
java version 1.6.0_18
OpenJDK Runtime Environment (IcedTea6 1.8) (6b18~pre4-1ubuntu4~ppa1)
OpenJDK Server VM (build 16.0-b13, mixed mode)
java.security.ProviderException: Could not initialize NSS
at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:201)
at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:103)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at 
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
at 
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:532)
at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262)
at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244)
at java.security.AccessController.doPrivileged(Native Method)
at 
sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244)
at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224)
at sun.security.jca.ProviderList.getProvider(ProviderList.java:232)
at sun.security.jca.ProviderList.getService(ProviderList.java:330)
at sun.security.jca.GetInstance.getInstance(GetInstance.java:157)
at java.security.Security.getImpl(Security.java:696)
at 
java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130)
at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121)
at sun.security.x509.AlgorithmId.init(AlgorithmId.java:114)
at sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381)
at 

[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Launchpad Bug Tracker]

This bug was fixed in the package firefox -
9.0.1+build1-0ubuntu0.10.04.2

---
firefox (9.0.1+build1-0ubuntu0.10.04.2) lucid-proposed; urgency=low

  [ Chris Coulson chris.coul...@canonical.com ]
  * Fix LP: #907666 - readd missing kubuntu-firefox-installer Replaces
- update debian/control

  [ Micah Gersten mic...@ubuntu.com ]
  * Fix LP: #917529 - Make sure new transitional packages have a versioned
dependency on Firefox so as to not break Firefox during partial upgrades
- update debian/control{,.in}

firefox (9.0.1+build1-0ubuntu0.10.04.1) lucid-proposed; urgency=low

  * New upstream stable release (FIREFOX_9_0_1_BUILD1) (LP: #904594)

firefox (9.0+build1-0ubuntu0.10.04.1) lucid-proposed; urgency=low

  * New upstream stable release (FIREFOX_9_0_BUILD1)

  [ Chris Coulson chris.coul...@canonical.com ]
  * Install the Apport hook as a source package hook
- rename debian/apport/firefox.py.in = debian/apport/source_firefox.py.in
- update debian/firefox.install.in
- update debian/rules
  * Don't unconditionally overwrite SourcePackage when reporting bugs with
the nightly apport hook
- update debian/apport/source_firefox.py.in
  * Set Channel = Unavailable if channel-prefs.js doesn't contain a
channel name
- update debian/apport/source_firefox.py.in
  * Ensure that create-tarball can handle there not being a locale blacklist
- update debian/build/create-tarball.py
  * Drop xpt.py and xpidl from $LIBDIR. xpidl is gone, and xpt.py isn't included
there in the upstream SDK
- update debian/firefox-dev.links.in
  * Fix LP: #901838 - Ugly busy pointer, due to libxcursor no longer matching
the cursor bitmap to a nice themed pointer
- add debian/patches/fix-cursor-handling.patch
- update debian/patches/series
  * Don't disable our bundled addons on upgrade
- update debian/vendor.js
  * Modify the UA string to add Ubuntu to the platform component
- add debian/patches/ubuntu-ua-string-changes.patch
- update debian/patches/series
- update debian/rules
  * Move custom scripts to debian/build
- move debian/get-xpi-id.py to debian/build/get-xpi-id.py
- move debian/refresh-supported-locales.pl to
   debian/build/refresh-supported-locales.pl
- move debian/extract-file.py to debian/build/extract-file.py
- update debian/rules
- move debian/testsuite.mk to debian/build/testsuite.mk
  * Dropped patches that are obsolete or fixed upstream:
- remove debian/patches/lp512615_cairo_lcd_filter.patch
- remove debian/patches/lp185622_system_path_default_browser.patch
- remove debian/patches/bz386904_config_rules_install_dist_files.patch
- remove 
debian/patches/bz532198_lp488354_ns_invokebyindex_not_thumb2_safe.patch
- remove debian/patches/bzXXX_libxul_sdk_nspr.patch
- remove debian/patches/drop_bz418016.patch
- remove debian/patches/firefox-fsh
- remove debian/patches/firefox-profilename
- remove debian/patches/ubuntu_no_app_updates.patch
- update debian/patches/series
  * Refresh patches:
- update debian/patches/firefox-kde.patch
- update debian/patches/mozilla-kde.patch
- update debian/patches/ubuntu-codes-google.patch
- update debian/patches/reload-new-plugins.patch
- update debian/patches/plugin-for-mimetype-pref.patch
- update debian/patches/add-syspref-dir.patch
- update debian/patches/allow-lockPref-everywhere.patch
- update debian/patches/distro-locale-searchplugins.patch
- update debian/patches/ubuntu-bookmarks.patch
  * Shrink the default mozconfig right down so that we use mostly upstream
defaults, rather than overriding them with our own options. It is still
possible to override them though. We also drop the pkg-config checks in
debian/rules which allowed a fallback build configuration when dependencies
aren't satisfied. Really, the build should just fail here rather than
continuing in some undesirable fallback mode
- update debian/firefox-dev.install.in
- update debian/firefox-dev.links.in
- update debian/mozconfig.in
- update debian/pkgconfig/libxul.pc.in
- update debian/control.in
- update debian/rules
  * Refresh build-depends, as this hasn't been done for a while:
- Drop patchutils, libxft-dev, libxinerama-dev, libgnome2-dev and bzip2.
  These aren't needed
- Drop liborbit2-dev - only required if there is no libidl
- Add libglib2.0-dev, libext-dev, libfontconfig1-dev and libpango1.0-dev,
  as the configure script checks for these directly
- Add minimum versions to libgconf2-dev, libgnomevfs2-dev, yasm and
  libgnomeui-dev
- Specify minimum versions for libnspr4-dev, libcairo2-dev, libsqlite3-dev
  and libnss3-dev when using system versions of those libs
  * Introduce a branch config file (debian/config/branch.mk) which holds
settings which shouldn't be merged between branches (eg, whether
the crash reporter should be enabled)
- add 

[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Launchpad Bug Tracker]

** Branch linked: lp:ubuntu/lucid-proposed/firefox

** Branch linked: lp:ubuntu/maverick-proposed/firefox

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/561124

Title:
  firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

Status in OpenJDK:
  Won't Fix
Status in “firefox” package in Ubuntu:
  Fix Released
Status in “openjdk-6” package in Ubuntu:
  Fix Released
Status in “firefox” source package in Lucid:
  Triaged
Status in “openjdk-6” source package in Lucid:
  Fix Released

Bug description:
  Binary package hint: firefox

  starting with openjdk/icedtea-1.7, a NSS based security provider is
  supported by icedtea.

  The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to
  include MOZILLA_FIVE_HOME and a number of subdirectories of
  MOZILLA_FIVE_HOME. The current NSS provider code seems to honor
  LD_LIBRARY_PATH, and loads the libnss3.so provided by the browser.

  Caused by: java.io.IOException: An incompatible version of NSS is already 
loaded, 3.7 or later required
  at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
  at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:168)

  (wondering why the nss version shipped with firefox 3.6.3 identifies
  itself as 3.7).

  However the openjdk build is configured for the nss version configured
  at build time, and you can run it with more than one browser, so it
  makes sense to use the libnss version which was detected at openjdk
  build time.

  My current solution/workaround is to pass a modified LD_LIBRARY_PATH
  to the subprocess such that the libnss3.so which was configured at
  build time is always used.

  The setting of LD_LIBRARY_PATH in the run-mozilla.sh start script may
  be convenient, but it does break plugins which are built to be
  independent of the browser used.

  Things to do on the browser side:

   - why does firefox use it's own outdated libnss copy, and doesn't use the 
system nss3?
   - why does the nss shipped with firefox identifies itself with 3.7?
   - the firefox startup script should not set LD_LIBRARY_PATH, but search 
itself for libs
 in known places.

  for a proposed workaround for the icedtea6-plugin to work with this
  broken plugin, see
  http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461

To manage notifications about this bug go to:
https://bugs.launchpad.net/openjdk/+bug/561124/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Launchpad Bug Tracker]

** Branch linked: lp:firefox/stable

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/561124

Title:
  firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

Status in OpenJDK:
  Won't Fix
Status in “firefox” package in Ubuntu:
  Fix Released
Status in “openjdk-6” package in Ubuntu:
  Fix Released
Status in “firefox” source package in Lucid:
  Triaged
Status in “openjdk-6” source package in Lucid:
  Fix Released

Bug description:
  Binary package hint: firefox

  starting with openjdk/icedtea-1.7, a NSS based security provider is
  supported by icedtea.

  The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to
  include MOZILLA_FIVE_HOME and a number of subdirectories of
  MOZILLA_FIVE_HOME. The current NSS provider code seems to honor
  LD_LIBRARY_PATH, and loads the libnss3.so provided by the browser.

  Caused by: java.io.IOException: An incompatible version of NSS is already 
loaded, 3.7 or later required
  at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
  at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:168)

  (wondering why the nss version shipped with firefox 3.6.3 identifies
  itself as 3.7).

  However the openjdk build is configured for the nss version configured
  at build time, and you can run it with more than one browser, so it
  makes sense to use the libnss version which was detected at openjdk
  build time.

  My current solution/workaround is to pass a modified LD_LIBRARY_PATH
  to the subprocess such that the libnss3.so which was configured at
  build time is always used.

  The setting of LD_LIBRARY_PATH in the run-mozilla.sh start script may
  be convenient, but it does break plugins which are built to be
  independent of the browser used.

  Things to do on the browser side:

   - why does firefox use it's own outdated libnss copy, and doesn't use the 
system nss3?
   - why does the nss shipped with firefox identifies itself with 3.7?
   - the firefox startup script should not set LD_LIBRARY_PATH, but search 
itself for libs
 in known places.

  for a proposed workaround for the icedtea6-plugin to work with this
  broken plugin, see
  http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461

To manage notifications about this bug go to:
https://bugs.launchpad.net/openjdk/+bug/561124/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Launchpad Bug Tracker]

** Branch linked: lp:~mozillateam/firefox/firefox.natty

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/561124

Title:
  firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

Status in OpenJDK:
  Won't Fix
Status in “firefox” package in Ubuntu:
  Fix Released
Status in “openjdk-6” package in Ubuntu:
  Fix Released
Status in “firefox” source package in Lucid:
  Triaged
Status in “openjdk-6” source package in Lucid:
  Fix Released

Bug description:
  Binary package hint: firefox

  starting with openjdk/icedtea-1.7, a NSS based security provider is
  supported by icedtea.

  The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to
  include MOZILLA_FIVE_HOME and a number of subdirectories of
  MOZILLA_FIVE_HOME. The current NSS provider code seems to honor
  LD_LIBRARY_PATH, and loads the libnss3.so provided by the browser.

  Caused by: java.io.IOException: An incompatible version of NSS is already 
loaded, 3.7 or later required
  at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
  at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:168)

  (wondering why the nss version shipped with firefox 3.6.3 identifies
  itself as 3.7).

  However the openjdk build is configured for the nss version configured
  at build time, and you can run it with more than one browser, so it
  makes sense to use the libnss version which was detected at openjdk
  build time.

  My current solution/workaround is to pass a modified LD_LIBRARY_PATH
  to the subprocess such that the libnss3.so which was configured at
  build time is always used.

  The setting of LD_LIBRARY_PATH in the run-mozilla.sh start script may
  be convenient, but it does break plugins which are built to be
  independent of the browser used.

  Things to do on the browser side:

   - why does firefox use it's own outdated libnss copy, and doesn't use the 
system nss3?
   - why does the nss shipped with firefox identifies itself with 3.7?
   - the firefox startup script should not set LD_LIBRARY_PATH, but search 
itself for libs
 in known places.

  for a proposed workaround for the icedtea6-plugin to work with this
  broken plugin, see
  http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461

To manage notifications about this bug go to:
https://bugs.launchpad.net/openjdk/+bug/561124/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Launchpad Bug Tracker]

** Branch linked: lp:~mozillateam/firefox/firefox.maverick

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/561124

Title:
  firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

Status in OpenJDK:
  Won't Fix
Status in “firefox” package in Ubuntu:
  Fix Released
Status in “openjdk-6” package in Ubuntu:
  Fix Released
Status in “firefox” source package in Lucid:
  Triaged
Status in “openjdk-6” source package in Lucid:
  Fix Released

Bug description:
  Binary package hint: firefox

  starting with openjdk/icedtea-1.7, a NSS based security provider is
  supported by icedtea.

  The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to
  include MOZILLA_FIVE_HOME and a number of subdirectories of
  MOZILLA_FIVE_HOME. The current NSS provider code seems to honor
  LD_LIBRARY_PATH, and loads the libnss3.so provided by the browser.

  Caused by: java.io.IOException: An incompatible version of NSS is already 
loaded, 3.7 or later required
  at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
  at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:168)

  (wondering why the nss version shipped with firefox 3.6.3 identifies
  itself as 3.7).

  However the openjdk build is configured for the nss version configured
  at build time, and you can run it with more than one browser, so it
  makes sense to use the libnss version which was detected at openjdk
  build time.

  My current solution/workaround is to pass a modified LD_LIBRARY_PATH
  to the subprocess such that the libnss3.so which was configured at
  build time is always used.

  The setting of LD_LIBRARY_PATH in the run-mozilla.sh start script may
  be convenient, but it does break plugins which are built to be
  independent of the browser used.

  Things to do on the browser side:

   - why does firefox use it's own outdated libnss copy, and doesn't use the 
system nss3?
   - why does the nss shipped with firefox identifies itself with 3.7?
   - the firefox startup script should not set LD_LIBRARY_PATH, but search 
itself for libs
 in known places.

  for a proposed workaround for the icedtea6-plugin to work with this
  broken plugin, see
  http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461

To manage notifications about this bug go to:
https://bugs.launchpad.net/openjdk/+bug/561124/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 561124] Re: firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

[Launchpad Bug Tracker]

** Branch linked: lp:ubuntu/firefox

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/561124

Title:
  firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

Status in OpenJDK:
  Won't Fix
Status in “firefox” package in Ubuntu:
  Fix Released
Status in “openjdk-6” package in Ubuntu:
  Fix Released
Status in “firefox” source package in Lucid:
  Triaged
Status in “openjdk-6” source package in Lucid:
  Fix Released

Bug description:
  Binary package hint: firefox

  starting with openjdk/icedtea-1.7, a NSS based security provider is
  supported by icedtea.

  The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to
  include MOZILLA_FIVE_HOME and a number of subdirectories of
  MOZILLA_FIVE_HOME. The current NSS provider code seems to honor
  LD_LIBRARY_PATH, and loads the libnss3.so provided by the browser.

  Caused by: java.io.IOException: An incompatible version of NSS is already 
loaded, 3.7 or later required
  at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
  at sun.security.pkcs11.SunPKCS11.init(SunPKCS11.java:168)

  (wondering why the nss version shipped with firefox 3.6.3 identifies
  itself as 3.7).

  However the openjdk build is configured for the nss version configured
  at build time, and you can run it with more than one browser, so it
  makes sense to use the libnss version which was detected at openjdk
  build time.

  My current solution/workaround is to pass a modified LD_LIBRARY_PATH
  to the subprocess such that the libnss3.so which was configured at
  build time is always used.

  The setting of LD_LIBRARY_PATH in the run-mozilla.sh start script may
  be convenient, but it does break plugins which are built to be
  independent of the browser used.

  Things to do on the browser side:

   - why does firefox use it's own outdated libnss copy, and doesn't use the 
system nss3?
   - why does the nss shipped with firefox identifies itself with 3.7?
   - the firefox startup script should not set LD_LIBRARY_PATH, but search 
itself for libs
 in known places.

  for a proposed workaround for the icedtea6-plugin to work with this
  broken plugin, see
  http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461

To manage notifications about this bug go to:
https://bugs.launchpad.net/openjdk/+bug/561124/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp