[Bug 1931602] Re: [apparmor] Segfault in logs with apparmor enabled

[Dariusz Gadomski]

Attaching a fix proposal for jammy.

** Patch added: "jammy.debdiff"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1931602/+attachment/5539262/+files/jammy.debdiff

** Changed in: firefox (Ubuntu Focal)
   Importance: Undecided => Medium

** Changed in: firefox (Ubuntu Hirsute)
   Importance: Undecided => Medium

** Changed in: firefox (Ubuntu Impish)
   Importance: Undecided => Medium

** Changed in: firefox (Ubuntu Impish)
   Importance: Medium => Low

** Changed in: firefox (Ubuntu Hirsute)
   Importance: Medium => Low

** Changed in: firefox (Ubuntu Focal)
   Importance: Medium => Low

** Changed in: firefox (Ubuntu)
   Importance: Medium => Low

** Tags added: sts-sponsor-dgadomski

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1931602

Title:
  [apparmor] Segfault in logs with apparmor enabled

Status in firefox package in Ubuntu:
  Confirmed
Status in firefox source package in Focal:
  Confirmed
Status in firefox source package in Hirsute:
  New
Status in firefox source package in Impish:
  New

Bug description:
  [Impact]

   * With apparmor enabled (and usr.bin.firefox in enforce mode) there
  is a crash happening every time right after launching Firefox.

  [Test Plan]

   * sudo aa-enforce /etc/apparmor.d/usr.bin.firefox

   * launch Firefox

   * See a similar segfault reported in the syslog:
  Jun 10 17:25:40 ubuntu kernel: [   86.775837] firefox[1765]: segfault at 0 ip 00007f724dd06384 sp 00007fffa7aec450 error 6 in libxul.so[7f724a483000+53b2000]
  Jun 10 17:25:40 ubuntu kernel: [   86.775843] Code: 00 0f 1f 44 00 00 50 80 3d f8 56 4c 04 00 74 02 58 c3 c6 05 ed 56 4c 04 01 48 8d 05 24 2c fa 02 48 8b 0d 77 f0 3a 04 48 89 01 <c7> 04 25 00 00 00 00 8d 01 00 00 e8 74 63 78 fc 66 2e 0f 1f 84 00

  [Where problems could occur]

  The fix adds additional paths to firefox apparmor profile (e.g. affecting /sys/devices/pci* and RealtimeKit1). When using deb version of firefox the browser may chose a different code path to execute than before, so it may affect hw acceleration (the sysfs paths were used by libxul) and audio.
  Maybe rendering artifacts and audio sync issues in videos.

  [Other Info]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1931602/+subscriptions