Dear Maintainer,

Launching iceweasel in safe-mode accessing a webpage that requires flash and then killing iceweasel makes iceweasel crash.

The output I receive is:

$ iceweasel -safe-mode www.youtube.es

(iceweasel:21004): GLib-WARNING **: In call to g_spawn_sync(), exit status of a child process was requested but SIGCHLD action was set to SIG_IGN and ECHILD was received by waitpid(), so exit status can't be returned. This is a bug in the program calling g_spawn_sync(); either don't request the exit status, or don't set the SIGCHLD action.

** (iceweasel:21004): WARNING **: Terminación anómala de programa al lanzar («spawn») el comando «dbus-launch --autolaunch=3c3da9241f38c2d53543fc085475ee29 --binary-syntax --close-stderr»:
Failed to open VDPAU backend libvdpau_nvidia.so: no se puede abrir el fichero del objeto compartido: No existe el fichero o el directorio
[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533
[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533

when I kill iceweasel with pkill:

$ pkill iceweasel


Iceweasel doesn't crash if I simply close the window nor if I interrupt the process via Ctrl+C.


The coredump generated is:

Core was generated by `/usr/lib/iceweasel/plugin-container /usr/lib/flashplugin-nonfree/libflashplayer'.
Program terminated with signal 11, Segmentation fault.
#0  mozalloc_abort (msg=0xb13fba90 "[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533") at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/memory/mozalloc/mozalloc_abort.cpp:30
30      /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/memory/mozalloc/mozalloc_abort.cpp: No existe el fichero o el directorio.
(gdb) set pagination off
(gdb) bt full
#0  mozalloc_abort (msg=0xb13fba90 "[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533") at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/memory/mozalloc/mozalloc_abort.cpp:30
No locals.
#1  0xb3feb3ba in Abort (aMsg=<optimized out>) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/xpcom/base/nsDebugImpl.cpp:421
No locals.
#2  NS_DebugBreak (aSeverity=<optimized out>, aStr=0xb5df2394 "Aborting on channel error.", aExpr=0x0, aFile=0xb5df2110 "/build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp", aLine=1533) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/xpcom/base/nsDebugImpl.cpp:408
        buf = {buffer = "[21050] ###!!! ABORT: Aborting on channel error.: file /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp, line 1533\000г\000\000\000\000\000\000\000\000 0r\262\002", '\000' <repeats 15 times>"\364, \277}\267\220\022dz\002\000\000\000Ļ?\261%\204|\267", '\000' <repeats 28 times>, "8?dz\370}}\267\220\273?\261\000\000\000\000\006\000\000\000\030Z\177\267\000\000\000\000\000\360"..., curlen = 137}
        ll = <optimized out>
        sevString = <optimized out>
#3  0xb41ff71d in mozilla::ipc::MessageChannel::OnChannelErrorFromLink (this=0xb2534048) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageChannel.cpp:1533
No locals.
#4  0xb4202875 in mozilla::ipc::ProcessLink::OnChannelError (this=0xb25b2040) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/glue/MessageLink.cpp:355
        lock = {mMonitor = 0xb250a200}
#5  0xb41ea641 in IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking (this=0xb2568000, fd=3) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:848
        send_server_hello_msg = false
#6  0xb41e6e48 in OnLibeventNotification (context=0xb2568000, fd=3, flags=<optimized out>) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_pump_libevent.cc:214
No locals.
#7  base::MessagePumpLibevent::OnLibeventNotification (fd=3, flags=2, context=0xb2568000) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_pump_libevent.cc:206
No locals.
#8  0xb372b522 in event_base_loop () from /usr/lib/i386-linux-gnu/libevent-2.0.so.5
No symbol table info available.
#9  0xb41e6d43 in base::MessagePumpLibevent::Run (this=0xb251a460, delegate=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_pump_libevent.cc:340
        poll_tv = {tv_sec = -1321221432, tv_usec = -1285742344}
        delay = {delta_ = -5597796212723397748}
        did_work = <optimized out>
        old_in_run = false
#10 0xb41f1a0e in MessageLoop::RunInternal (this=this@entry=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_loop.cc:229
No locals.
#11 0xb41f1b36 in RunHandler (this=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_loop.cc:222
No locals.
#12 MessageLoop::Run (this=0xb13fc0bc) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/message_loop.cc:196
        save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0xb13fc0bc, previous_state_ = 0x0}
#13 0xb41f5687 in base::Thread::ThreadMain (this=0xb2515888) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/thread.cc:168
        aLocal = -73 '\267'
        message_loop = {<base::MessagePump::Delegate> = {_vptr.Delegate = 0xb7452330}, type_ = MessageLoop::TYPE_IO, id_ = 2, work_queue_ = {c = {<std::_Deque_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_map = 0xb2509da0, _M_map_size = 8, _M_start = {_M_cur = 0xadf9f4f0, _M_first = 0xadf9f400, _M_last = 0xadf9f5f4, _M_node = 0xb2509db8}, _M_finish = {_M_cur = 0xadf9f4f0, _M_first = 0xadf9f400, _M_last = 0xadf9f5f4, _M_node = 0xb2509db8}}}, <No data fields>}}, delayed_work_queue_ = {c = {<std::_Vector_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_start = 0x0, _M_finish = 0x0, _M_end_of_storage = 0x0}}, <No data fields>}, comp = {<std::binary_function<MessageLoop::PendingTask, MessageLoop::PendingTask, bool>> = {<No data fields>}, <No data fields>}}, deferred_non_nestable_work_queue_ = {c = {<std::_Deque_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_map = 0xb2509d80, _M_map_size = 8, _M_start = {_M_cur = 0xb250e600, _M_first = 0xb250e600, _M_last = 0xb250e7f4, _M_node = 0xb2509d8c}, _M_finish = {_M_cur = 0xb250e600, _M_first = 0xb250e600, _M_last = 0xb250e7f4, _M_node = 0xb2509d8c}}}, <No data fields>}}, pump_ = {ptr_ = 0xb251a460}, destruction_observers_ = {observers_ = {<std::_Vector_base<MessageLoop::DestructionObserver*, std::allocator<MessageLoop::DestructionObserver*> >> = {_M_impl = {<std::allocator<MessageLoop::DestructionObserver*>> = {<__gnu_cxx::new_allocator<MessageLoop::DestructionObserver*>> = {<No data fields>}, <No data fields>}, _M_start = 0x0, _M_finish = 0x0, _M_end_of_storage = 0x0}}, <No data fields>}, notify_depth_ = 0, type_ = base::ObserverList<MessageLoop::DestructionObserver, false>::NOTIFY_ALL}, nestable_tasks_allowed_ = true, exception_restoration_ = false, thread_name_ = {static npos = <optimized out>, _M_dataplus = {<std::allocator<char>> = {<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data fields>}, _M_p = 0xb2509d0c "Chrome_ChildThread"}}, incoming_queue_ = {c = {<std::_Deque_base<MessageLoop::PendingTask, std::allocator<MessageLoop::PendingTask> >> = {_M_impl = {<std::allocator<MessageLoop::PendingTask>> = {<__gnu_cxx::new_allocator<MessageLoop::PendingTask>> = {<No data fields>}, <No data fields>}, _M_map = 0xb2509d60, _M_map_size = 8, _M_start = {_M_cur = 0xadf9f8dc, _M_first = 0xadf9f800, _M_last = 0xadf9f9f4, _M_node = 0xb2509d78}, _M_finish = {_M_cur = 0xadf9f8dc, _M_first = 0xadf9f800, _M_last = 0xadf9f9f4, _M_node = 0xb2509d78}}}, <No data fields>}}, incoming_queue_lock_ = {lock_ = {os_lock_ = {__data = {__lock = 0, __count = 0, __owner = 0, __kind = 0, __nusers = 0, {__spins = 0, __list = {__next = 0x0}}}, __size = '\000' <repeats 23 times>, __align = 0}}}, state_ = 0xb13fc080, run_depth_base_ = 1, transient_hang_timeout_ = 0, permanent_hang_timeout_ = 0, next_sequence_num_ = 0}
#14 0xb41e72e7 in ThreadFunc (closure=0xb2515888) at /build/iceweasel-DUGEsl/iceweasel-31.2.0esr/ipc/chromium/src/base/platform_thread_posix.cc:39
        delegate = 0xb2515888
#15 0xb7799954 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
No symbol table info available.
#16 0xb3aaac1e in clone () from /lib/i386-linux-gnu/libc.so.6
No symbol table info available.
(gdb)